0bfe91e9fd72570c488f7faf00ffc87d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0bfe91e9fd72570c488f7faf00ffc87d_JaffaCakes118
Size

6.0MB
MD5

0bfe91e9fd72570c488f7faf00ffc87d
SHA1

d15d9a8ca2e5e9f8df34d6f7db8a10c8ac57726b
SHA256

77c1767c2fc367780844710fc159ee9e821bae679cb5c3e66ee613280a3bc552
SHA512

99a72308a1e5bb788f269bcdd7a01d766922205d4a1d7293124384839d1a45376ffcc42d1b729f83ec80b76d5ffca3d83f0e233eb7de3661e9281e5aad748b4f
SSDEEP

24576:MzbW2n1ZE06d+rPBBDuaN5W2JAFW+7SEV6zjqBlQ3EI7l0If1+gzJO4WJA858BLX:127XYR/k8rxl7rEot4+KGdXS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0bfe91e9fd72570c488f7faf00ffc87d_JaffaCakes118

Files

0bfe91e9fd72570c488f7faf00ffc87d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7b90a07c334a5c940b10f51520abd59c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord628
ord662
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord644
ord100

Sections

.text
Size: 5.8MB - Virtual size: 5.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ