0cf8e6312edfe6f36112b9fd6579ff52_JaffaCakes118 | Triage

Sharing

General

Target

0cf8e6312edfe6f36112b9fd6579ff52_JaffaCakes118
Size

24KB
MD5

0cf8e6312edfe6f36112b9fd6579ff52
SHA1

f4de20032bd4533f5fd3ac0825ea32733741a6f4
SHA256

ae98a53896b7d99e438b966f52878cde148e0c1b9fdc1a4df125056aac1d30f5
SHA512

aab17faaf9b15f4046f8793f8fa5f46fddde539b2aa1e7ffe12b2e5e7e1853e62615496cc8437a7303a111ea156421160fbbe2f3dcc75ecdf549d32dcf460ef7
SSDEEP

192:nPE78DG2rl/yXd2HflfaYNdsa03X6jNh+yMsGLNkTuwI+ljE78DG2rl/yX:lG9Xd2CwbXMsgNkflxG9X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0cf8e6312edfe6f36112b9fd6579ff52_JaffaCakes118

Files

0cf8e6312edfe6f36112b9fd6579ff52_JaffaCakes118
.exe windows:4 windows x86 arch:x86

158fe3ca21de81e1d45a9192888625e3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord517
ord595
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord645
ord100
ord616
ord618

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ