0b4529857cd0a543727b8bf6e638810f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b4529857cd0a543727b8bf6e638810f_JaffaCakes118
Size

48KB
MD5

0b4529857cd0a543727b8bf6e638810f
SHA1

da9dbc476bd6e52de202f6a488d1104b2141c10e
SHA256

332b87f80117306ff419dd2f099bde4d71f4ad631d591440b2fbc3c081459de7
SHA512

5f62d345e871e159f8c164d1d3947ae78598e6c60742cedc41450e631eda47d6579fd21a268d443eb8c1d1006bb81253217717f249e679d16af44abfa77a42d3
SSDEEP

768:WiNUTYjGbOJNONjCVPCEsokl/9++8jJR9ec:WtMKb1ucokl/OMc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b4529857cd0a543727b8bf6e638810f_JaffaCakes118

Files

0b4529857cd0a543727b8bf6e638810f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2b95def43c645bdec2b2bb4bc3b94fa4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord516
ord595
ord631
ord709
ord632
ord525
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord564
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord530
ord608
ord609
ord717
ProcCallEngine
ord537
ord644
ord645
ord648
ord685
ord100
ord689
ord617

Sections

.text
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ