0b58d80f1a41b93db8d34fa3bf093898_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b58d80f1a41b93db8d34fa3bf093898_JaffaCakes118
Size

88KB
MD5

0b58d80f1a41b93db8d34fa3bf093898
SHA1

1a9f4f1e173e9397021da9cff53763d58737a93b
SHA256

db9f06e150fc3a93dca13802b40b491b96f875e8a507d3b46430cfa4b16b549b
SHA512

8fa803959ae054436e5e4115f03d4d0b6088ef326eae9425bd949cc37c92249f3d24ec39efda8240b5744baf522b49b4cc90b9c2759d8257f2e4e959827bea49
SSDEEP

1536:7SppBR39bw+eHZFfIKcpNbuF/Eb6jtjZjgjWjpjMc7Qs18nja:aXRWBAc7DanO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b58d80f1a41b93db8d34fa3bf093898_JaffaCakes118

Files

0b58d80f1a41b93db8d34fa3bf093898_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1d08d703f8ec81dff9da409d9a6a4c9e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
MethCallEngine
ord518
ord594
ord598
ord520
ord709
ord632
EVENT_SINK_AddRef
ord528
ord670
ord564
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord717
ProcCallEngine
ord535
ord537
ord644
ord645
ord570
ord100
ord431
ord617
ord619

Sections

.text
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ