0b8d7f6c439ad15333c8db3ff49472fc_JaffaCakes118 | Triage

Sharing

General

Target

0b8d7f6c439ad15333c8db3ff49472fc_JaffaCakes118
Size

8KB
MD5

0b8d7f6c439ad15333c8db3ff49472fc
SHA1

3d383878f6d61720b102e31bab8fc6920151ac4e
SHA256

e4b8aeb98bdff6eb505b7764ff1a38bb4aab591df04aaa54d8256905382e6057
SHA512

7c98bcefae17f0b5e9af04599a665d21bba7c5a829287d3bc7ebac1f440046444a9fca1b426d0c5c68245ce0ae64d4a8693cd9fb90303c5b2d8ca0bcac2335b8
SSDEEP

96:9q6p+VIctFfeubhinaRA2JAIsaTOog627Uv:8Y+2GK8pJAI7y6+Uv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b8d7f6c439ad15333c8db3ff49472fc_JaffaCakes118

Files

0b8d7f6c439ad15333c8db3ff49472fc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ce2a74c7f83cd91a27e9c3928f8755a8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm50

MethCallEngine
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord100

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 346B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ