0a4a57b436551fc4888efb234dab0ff4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0a4a57b436551fc4888efb234dab0ff4_JaffaCakes118
Size

263KB
MD5

0a4a57b436551fc4888efb234dab0ff4
SHA1

600063811a5be24f71567abaf5a142828cc83ec6
SHA256

9f81aec9df5883e76af56efbc97ce3f7af7de96ff3742c7f509c7891493981ed
SHA512

22ee935ad0bebfddc6a380351be0442ac78f6e7e86008194ebd09d503c8744d61fcdc695fddeff74939da0c8cad7915132299d2e7acc9e117768f47b8b64b993
SSDEEP

3072:qPt49QG2Hq1l+ksigNEkVez/daFYMKK7tBD+Cd1aBrwJN75urekwUEeHIym5l4as:W5s7MH/+CDJZUE2I9rHqqq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a4a57b436551fc4888efb234dab0ff4_JaffaCakes118

Files

0a4a57b436551fc4888efb234dab0ff4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2d7606b0ed2d1c2c29d9cc3ac96d3d5c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord628
ord598
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord534
ProcCallEngine
ord644
ord100

Sections

.text
Size: 148KB - Virtual size: 145KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 132KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ