0c81ac33ca1204d11df3693ad6134022_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c81ac33ca1204d11df3693ad6134022_JaffaCakes118
Size

152KB
MD5

0c81ac33ca1204d11df3693ad6134022
SHA1

450209075c4f628b1787461eb9029b9c8ef44712
SHA256

e349d5f41154c76be13b704f053defe57e964e8bb6e8de09f0d81a955dd56455
SHA512

99581a683a09c0099889b2fb59afe748df2e99383b3bbf0e8f00c2eb65a1a7aa455b20567602029a7dde00b70d579b44f9b900074039b640014374c1d71122e3
SSDEEP

3072:kfTXUwemmdYhgCrE3hqAZoqRKqJUJyQGCUsPng3LeQi423C:kXeZdYcqAZoqRKqJTCUsPng3Lhi423

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c81ac33ca1204d11df3693ad6134022_JaffaCakes118

Files

0c81ac33ca1204d11df3693ad6134022_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f09cde21fca5b4c41ef4fc0e497c5a4a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
ord693
ord588
MethCallEngine
ord621
ord516
ord517
ord518
ord660
ord661
ord665
ord592
ord595
ord702
ord598
ord307
ord631
ord709
ord632
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord606
ord607
ord608
ord717
ProcCallEngine
ord537
ord644
ord645
ord570
ord648
ord571
ord681
ord576
ord685
ord578
ord100
ord579
ord616
ord617
ord618
ord619
ord546
ord581

Sections

.text
Size: 144KB - Virtual size: 141KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ