0f62f7815d7b9ea4cd5219e27e5e6a7e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f62f7815d7b9ea4cd5219e27e5e6a7e_JaffaCakes118
Size

236KB
MD5

0f62f7815d7b9ea4cd5219e27e5e6a7e
SHA1

2a995f248d139c780bfc125a4517fcad338a1bd2
SHA256

e74805b3513d24bc4e27ca27d5a0d472159a980f3f63b93c04b27c7a058579a3
SHA512

1be99d1ccc9330566308b5e1b8163e2b26a76868e5e91ba58485e2c9caae9285986e4ab5c542bb1406f38e98b37dc5c90130dc8e5a7b779d7b1a1812b7581ce1
SSDEEP

6144:dbJsc8+sAlNfVdSGB+YK/udJVanrNhCi4TTl/:DsczsUjSGB+TzCiE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f62f7815d7b9ea4cd5219e27e5e6a7e_JaffaCakes118

Files

0f62f7815d7b9ea4cd5219e27e5e6a7e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cc570816b5cc36584ba3f0b5cdabbde5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadResource
LoadLibraryA
LockResource
ExitProcess

msvbvm60

MethCallEngine
ord516
ord631
ord525
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord608
ord717
ProcCallEngine
ord537
ord644
ord100

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 208KB - Virtual size: 207KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ