0b3a98d5354442aadc72c5c326291650_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b3a98d5354442aadc72c5c326291650_JaffaCakes118
Size

180KB
MD5

0b3a98d5354442aadc72c5c326291650
SHA1

ef3b16519ea026210201e95e078c6cd13545a622
SHA256

69e4cce505050f4e7fe790d6f2b2ab0512e208cbf9dc4888c7d98c4ec1645bbd
SHA512

c69b2f399d94924e3f4bc0b51eee9d0043ad620ab337a99d9e6979ec81b2a97d1e9fa44fef123a96f3adefda86f27b47f0811c096a07ee3f269d09814dd40eae
SSDEEP

1536:1488RZ865JlPRUqrO5Igkb46bry9/QclErHJVYYMu91b5T66:wo8+qyu/b4EC/LyrHHRMI1Jj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b3a98d5354442aadc72c5c326291650_JaffaCakes118

Files

0b3a98d5354442aadc72c5c326291650_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2afdd4f403a3ad64c6c4adbe1d38a60b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord628
ord665
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord644
ord100

Sections

.text
Size: 172KB - Virtual size: 170KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ