0f3e21a84ff208b0024f4f709a60898a_JaffaCakes118 | Triage

Sharing

General

Target

0f3e21a84ff208b0024f4f709a60898a_JaffaCakes118
Size

516KB
MD5

0f3e21a84ff208b0024f4f709a60898a
SHA1

c7cbc1ca40556237ff43c6d380af6248aa0ad2bd
SHA256

d6a0d463458305063df87acff936963d4e43f4ef8dd2b54177565ad85b8174b5
SHA512

cb7eaf6f87471eae2587e6522a0c9058233a2073e30528257df78627a1b8d87fdefc1a9f025af20f28082fc357e73474d272ba884e2fee229adb1f5003d3d594
SSDEEP

12288:8lfKnyq1tPeW9oZA9mpmV39MOFF2ek2cxEXto1NhCG:28ptT4qVtcek2aUC/hC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f3e21a84ff208b0024f4f709a60898a_JaffaCakes118

Files

0f3e21a84ff208b0024f4f709a60898a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

87e1eff45d4b9d65f275a3b510f16b63

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord598
ord520
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ord717
ProcCallEngine
ord644
ord645
ord647
ord685
ord100
ord617
ord619

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 484KB - Virtual size: 480KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ