09a8b1510b259d20069bc1df7297d26f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

09a8b1510b259d20069bc1df7297d26f_JaffaCakes118
Size

36KB
MD5

09a8b1510b259d20069bc1df7297d26f
SHA1

f129738ddd33d17127e6ab74e8bc81ea4fe35a23
SHA256

db36b0b4f7c1f05b656462847fdbe95159f272f7856c1bec33d01acc2c3f8013
SHA512

1ada793af66ca29a5780ca2b96a13dbe7ba2177ba453d63d3750cd15aba0a4fc5e76734d60fdddd13cf3d18566eb429d337728b47a06d120f2562014df356eda
SSDEEP

384:fqbq4A5cBVICkZ2cl1r4hCIeUm8jvg6po+vXQq:OOcXICkZ2Mr4hzE8j7vA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09a8b1510b259d20069bc1df7297d26f_JaffaCakes118

Files

09a8b1510b259d20069bc1df7297d26f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1990e34d02baebfa008f16440a6ff63a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord631
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord607
ord608
ord717
ProcCallEngine
ord644
ord570
ord573
ord100
ord616
ord618
ord581

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 4KB - Virtual size: 600B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.FD
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_MEM_READ