0ba5da5fdbc92c8577377dccca4e04db_JaffaCakes118 | Triage

Sharing

General

Target

0ba5da5fdbc92c8577377dccca4e04db_JaffaCakes118
Size

40KB
MD5

0ba5da5fdbc92c8577377dccca4e04db
SHA1

b563736cfec8e7d7cbb59dd35664952a3b02408f
SHA256

b467b2e3c415591240e04d070642af6d2656b624e74476ed9d2a9622012b588f
SHA512

1c4d4ea1460148bef14c76d1d76033e528752df75f5bcf005d4baa460cc783f917ea3cfcfbe9b70254746f65d2c9ddedecbdbfa69c71f5099c8195628bdb9e0c
SSDEEP

384:pVnBFmc00TRiRKHzWQOejWqGmSb9uJ4n+1PHb7Jwrl+q3JFmc00:pjFmc2OjO1upPH2sqZFmc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ba5da5fdbc92c8577377dccca4e04db_JaffaCakes118

Files

0ba5da5fdbc92c8577377dccca4e04db_JaffaCakes118
.exe windows:4 windows x86 arch:x86

89bb48d6899e505e04d9c8960dda41f8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord607
ord608
ord531
ProcCallEngine
ord537
ord644
ord648
ord100
ord616
ord617
ord619
ord546

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ