0d9715a0a25242bf2281d7dbbc696bb8_JaffaCakes118 | Triage

Sharing

General

Target

0d9715a0a25242bf2281d7dbbc696bb8_JaffaCakes118
Size

68KB
MD5

0d9715a0a25242bf2281d7dbbc696bb8
SHA1

42b22e44e7e85a3773343cb54a2e2310265941c7
SHA256

dbf4f55f41d79831c5df300f1e7f5b11292b7c7ef91163e3151e5c1c853c3e12
SHA512

0b0fc64a54f91d050c9185e39cb811723f024f016e814d25c3b9ba0ee7d002a2d6ff134beabc18d6ae12a026ce083ee8292ae997ba934fbc3d3d834ca39e02fb
SSDEEP

768:zcDliTdK2Al+qOQSgFrhKo//WomvdfQXwYt1IEDIefZsK:4DIx9AcqOK3qowgnt1d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d9715a0a25242bf2281d7dbbc696bb8_JaffaCakes118

Files

0d9715a0a25242bf2281d7dbbc696bb8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c7005d5e374c770dd6e3b206fd4b8803

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvbvm60

MethCallEngine
ord517
ord518
ord593
ord594
ord598
ord631
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord716
ord717
ProcCallEngine
ord537
ord644
ord570
ord648
ord573
ord100
ord616
ord618
ord546
ord547
ord580

Sections

.text
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 308B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ