0848ae260c17c46ff99047a1cb199fcb_JaffaCakes118 | Triage

Sharing

General

Target

0848ae260c17c46ff99047a1cb199fcb_JaffaCakes118
Size

188KB
MD5

0848ae260c17c46ff99047a1cb199fcb
SHA1

d266961cb8dcb9dc0d49ed37643514421d1486f1
SHA256

cff75849b800f4ad5033cae63e84ef52c99c0ded451525537a50d81e1db4d979
SHA512

b1be82bc6a83351910d00b20aa2d5e4480eb72bc41fa17a3090162a1cfa0a95d9a58464b860c5b88e26fb0a300e498890c45593fa9cafae3b76c2dcb5e588069
SSDEEP

3072:MiHgoJlsDzGUUXam+fiaqQsGJlGu5OGOGcGQiV7GP5WeagRuwyTtorlMA+ojrjom:LsDzeXaX6ssGJlGu5OGOGcGQiZGPUJID

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0848ae260c17c46ff99047a1cb199fcb_JaffaCakes118

Files

0848ae260c17c46ff99047a1cb199fcb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c50cacdeda7da3db03c2c6548b9eb8da

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord582
ord588
MethCallEngine
ord621
ord667
ord593
ord595
ord598
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ProcCallEngine
ord570
ord681
ord685
ord100
ord612
ord618
ord547

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 148KB - Virtual size: 147KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ