0f51dae2ce5f612b52d9a937911ddf93_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f51dae2ce5f612b52d9a937911ddf93_JaffaCakes118
Size

611KB
MD5

0f51dae2ce5f612b52d9a937911ddf93
SHA1

48058b6315931cda0bd62d8b18c28a6c9db0d5a8
SHA256

9d6591bd57a199ccc496a831509bb0393c5ae9c92d45aa588a497d2262a543fc
SHA512

127d2ce21ee522526039788a0fe1b4c0d47af068802a02e4cdc2f8d89f5e6c40f5612f4ec8766baca839e6b2860eb95c684dec389e0a6c94070ca17b8174d74d
SSDEEP

6144:pDfRhpk9oOUPTJ3T8XWt5kgK4DXt/II38+6471WQyN9vKUinnDlj2Yg64hk6cbUo:DY98T2MkgK4D9N6mcQyN9vKUml3gp++

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f51dae2ce5f612b52d9a937911ddf93_JaffaCakes118

Files

0f51dae2ce5f612b52d9a937911ddf93_JaffaCakes118
.exe windows:4 windows x86 arch:x86

48411569b26c20f090851fb46659c997

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlMoveMemory

msvbvm60

MethCallEngine
ord621
ord516
ord595
ord598
ord631
EVENT_SINK_AddRef
ord527
ord529
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord608
ord717
ProcCallEngine
ord537
ord644
ord570
ord648
ord681
ord685
ord100
ord616
ord581

Sections

.text
Size: 264KB - Virtual size: 262KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 324KB - Virtual size: 322KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ