0905a167e734027fe83ede50ee5c88e3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0905a167e734027fe83ede50ee5c88e3_JaffaCakes118
Size

141KB
MD5

0905a167e734027fe83ede50ee5c88e3
SHA1

7946297a02fbf69dc81ab689a233ba6426f2782c
SHA256

deaae6a3368d5c1809e48f511cd317a1e2948ffffe3b9838050c6d5d3c7b6ea1
SHA512

d209f1bbfc20d01c275cc0f3a53d2f56f0879d1ca6d9aff47a20328e9e34b8fde72ede51f8081d5775dafbc91baadfb3a09f33821905d1a569c92a056a26b0ad
SSDEEP

3072:L/0vxtyk4+BobeZMGV/q928AvQjDvHGSgYdJ5uecTDLbZ:L/0vNx4HDb5uecTDLt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0905a167e734027fe83ede50ee5c88e3_JaffaCakes118

Files

0905a167e734027fe83ede50ee5c88e3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fb6a6c0dc7629d09448ed24649b9ef07

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord593
ord594
ord598
ord631
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord670
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord607
ord608
ord717
ProcCallEngine
ord644
ord570
ord648
ord573
ord681
ord685
ord578
ord100
ord616
ord618

Sections

.text
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ