0c640c33bbabc6a81bc89eff8e8163bf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c640c33bbabc6a81bc89eff8e8163bf_JaffaCakes118
Size

148KB
MD5

0c640c33bbabc6a81bc89eff8e8163bf
SHA1

b2462a22f8629afc8ac53801d45c1cc4103c6d66
SHA256

68b4faa221d6116586867499ce3214f69bea0dbb268ed00a67e62bedec9c8d68
SHA512

4b7a7c265e5154ff2f6ed48b39e244773a941c1e3ec45e18a1ff98241f69ed2effc3e0f36dd9e47c686ccca996bdd4ed5b3d3d1b197f0dff8f8a600ca7a7bf97
SSDEEP

3072:i5D0HQ4/ajukFz4LS38Lg38Nyc1UZKD3ctrQDOBvRH8w21wHX0J1E:i5D0HxLoc1UZKCkDWRR21wHX0J1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c640c33bbabc6a81bc89eff8e8163bf_JaffaCakes118

Files

0c640c33bbabc6a81bc89eff8e8163bf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9b2ee9e8d9c837208433f1c769c736ca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord665
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord608
ord717
ProcCallEngine
ord644
ord537
ord681
ord100
ord581

Sections

.text
Size: 140KB - Virtual size: 139KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ