0a8a62c02fbbf2b1930106e502821a30_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0a8a62c02fbbf2b1930106e502821a30_JaffaCakes118
Size

83KB
MD5

0a8a62c02fbbf2b1930106e502821a30
SHA1

a3213eec8e7dc86841942aed8f38ef51a20b33e1
SHA256

4ccaed842548bf73f29c9df4e88339960311e450c22497014499ee599cc10560
SHA512

10cf8481a86dac2636ebec7483db94eed64ccf2c2538289a1f5fecb4b8c73fec5552518c8dcc403d5377852b2308515d5c9ba5c665661ed72f2c01d3ac821ade
SSDEEP

1536:CfdrTN8udL1exhEgxb8a9uVUwpJwbf0bPKHjG3nMEf49UZAs:sTNPLcx/xHAtyf0PKHjwv8UZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a8a62c02fbbf2b1930106e502821a30_JaffaCakes118

Files

0a8a62c02fbbf2b1930106e502821a30_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d1311ad00ff50a50ea059eeade7faa0b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

lz32

LZSeek

gdi32

CloseMetaFile

imm32

ImmGetDefaultIMEWnd

msvbvm60

ord183
ord691
ord669
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord100
ord687
ord432

Sections

.text
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ