0d4cac02b0c3bbbeb9c0457bf62fe1f8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0d4cac02b0c3bbbeb9c0457bf62fe1f8_JaffaCakes118
Size

24KB
MD5

0d4cac02b0c3bbbeb9c0457bf62fe1f8
SHA1

7c7e893ae971ad9496943725e6689a6defe6aa25
SHA256

8b45204e3b270c9c6df471082d9e2b50981697395fb4aba8d69d5db8741d8670
SHA512

e1c8c8b49abbba387d72377e7265126dee69172ca075f149196293c3e3cf5d09b48a2b3f390295fedf5df483519bb83db61ae995510ef5a9f05812c2655613de
SSDEEP

384:eNvx0YN7b46+fU43BtgiiHEMBtuTn7O4hZEbxw:Kvap6uNiJmBzEm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d4cac02b0c3bbbeb9c0457bf62fe1f8_JaffaCakes118

Files

0d4cac02b0c3bbbeb9c0457bf62fe1f8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2b675bc84a22864f230a8789a2462768

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord585
ord187
ord587
MethCallEngine
ord516
ord661
ord306
ord307
ord631
ord709
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord318
ord717
ProcCallEngine
ord644
ord645
ord100
ord687
ord616
ord541

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ