0c65a78712bc1eb44c257a8ddf44fba2_JaffaCakes118 | Triage

Sharing

General

Target

0c65a78712bc1eb44c257a8ddf44fba2_JaffaCakes118
Size

16KB
MD5

0c65a78712bc1eb44c257a8ddf44fba2
SHA1

cd24573b1d64a6c33b670d90f709a9bd6cf2c0d2
SHA256

68683a4406f6ece9c19b860d4506cdaddf4fa195f4b9dde81373745d12507526
SHA512

5436b58e05ee3b1caeefd1858af940b458a5c9e4bc0ca3dfad583700128b5910cd7b1d305c96fa079b9460200e904e3d5cee966e1381f6515992756e7aa0d026
SSDEEP

96:7hOpxp9fBuALp2MH+pC61xvwINbPEm43PEmI4Z6xJ3fR4YvAga5E+Zq04JE+2Cw:7hOvvx2fs6xX6X7sxQaADDq32+A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c65a78712bc1eb44c257a8ddf44fba2_JaffaCakes118

Files

0c65a78712bc1eb44c257a8ddf44fba2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e8f1a3ade8d72592fda5db662b35c475

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord666
ord595
ord598
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord717
ProcCallEngine
ord570
ord100

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ