0b39843f6f85d1d45f854622bbda51ea_JaffaCakes118 | Triage

Sharing

General

Target

0b39843f6f85d1d45f854622bbda51ea_JaffaCakes118
Size

2.6MB
MD5

0b39843f6f85d1d45f854622bbda51ea
SHA1

28d56436799a44656c73fa1718b25ac3b19dc823
SHA256

09adbbf836349a4fd544e11575a7ff2fc9045b0ac50e7e3c6f3d3c8afb33006e
SHA512

cf9e2f3d18214de351425d57e3c97db61a7f9dd31c8e871a348d559099250bfbb078e67df3beb9b4e18d4cb7ac31e96406944391e91b6d3ab3bb450b83113460
SSDEEP

24576:/16Vth3LrWsH/nV4Ot8zK0qt4L7gLB/wYM/GkLk53YSJ+lXAkJQnsuMVCvmyTYBl:qtLKshEKa7G/0xLkmzXCvXvG7Bhoi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b39843f6f85d1d45f854622bbda51ea_JaffaCakes118

Files

0b39843f6f85d1d45f854622bbda51ea_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f0e0bdd0f1d6c9a713c51fcb7bce573e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord595
ord520
ord631
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord536
ord645
ord648
ord685
ord100
ord617
ord619

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ