0f60d3a900651071b02f60f6e0367a58_JaffaCakes118 | Triage

Sharing

General

Target

0f60d3a900651071b02f60f6e0367a58_JaffaCakes118
Size

24KB
MD5

0f60d3a900651071b02f60f6e0367a58
SHA1

9eaf9eaa9fa3eb5deddd275f13a8957fd37e19ce
SHA256

dddd859409c8ac2351cbeef21d0105a9d6aac99a781199831298df5da6d6bb7f
SHA512

e846b69889a4bf502d1ba779074b2648b22b57b45513782ef11eba03bbde5cc222160749698b55ccb27446abd07330cad6143b951c682325a1910364e5a0c804
SSDEEP

384:UrJK/lldy6Y41FYsJ84H5y1HDgd5OogHt0F:UFQZY41FY2p5aUuy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f60d3a900651071b02f60f6e0367a58_JaffaCakes118

Files

0f60d3a900651071b02f60f6e0367a58_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4af22468a0726e72a3433e7241c4c3db

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
ord583
MethCallEngine
ord516
ord554
ord664
ord592
ord522
ord709
ord631
ord632
ord526
EVENT_SINK_AddRef
ord527
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord571
ord100
ord687
ord689
ord610
ord616

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ