0c7b818212609da594c2d00341631ad9_JaffaCakes118 | Triage

Sharing

General

Target

0c7b818212609da594c2d00341631ad9_JaffaCakes118
Size

60KB
MD5

0c7b818212609da594c2d00341631ad9
SHA1

f730b5c60868219a2dc0a553d61d186c0eb27065
SHA256

e3a97f2f2284e5469efcada8a0dd7aec5cdd05471d9d3db492c4a7cbdc4cc2de
SHA512

38a0a3b45ab414314b791db1ac6b2be9c618b51682faa025d14868b537023c0861e948b49b25c3310c85bed4a6e3d6322333289003d92fe214af9e7ac4a65130
SSDEEP

768:7ErZLkxtxWlsY/DyBJFX8286iX0XskkU5tYHrNbKvSf5hc6bdvr:g1LYDN+XAfiP5hc6bdvr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c7b818212609da594c2d00341631ad9_JaffaCakes118

Files

0c7b818212609da594c2d00341631ad9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

472b753ac492402371bb82064f06bcba

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord582
ord583
ord585
ord187
ord695
MethCallEngine
ord516
ord518
ord593
ord594
ord595
ord596
ord598
ord631
ord709
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord674
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord530
ord608
ord717
ProcCallEngine
ord535
ord644
ord573
ord681
ord685
ord100
ord616
ord581

Sections

.text
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ