0f7ca2061afe25f70da9b05cb5386fdd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f7ca2061afe25f70da9b05cb5386fdd_JaffaCakes118
Size

13KB
MD5

0f7ca2061afe25f70da9b05cb5386fdd
SHA1

8f207b4627fe459b6f55b6bac99ddf5465dabbb6
SHA256

0c071ba41687f09be54dc415ea571a88ff21c67011a7ee58b63499c3c06fd180
SHA512

f3949a45e2e5707047e394bdb81f873f2ac1fb200d31385ce2de8308f899e73bcd4e202ca7a1ae6cf6c2a41c0205b86a210d39c2369bc58bef632799c75baa89
SSDEEP

384:KvBPc2mlOyq3zhiqS6/U23d2dKGiHfZDH+5VSdppaFWe:KvFjmYyOj3cdD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f7ca2061afe25f70da9b05cb5386fdd_JaffaCakes118

Files

0f7ca2061afe25f70da9b05cb5386fdd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5d00dfc2e6f70d81ea7fe735c02bf4bd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
ord516
ord518
ord593
ord594
ord598
ord631
ord632
ord526
DllFunctionCall
__vbaExceptHandler
ord607
ord608
ProcCallEngine
ord537
ord648
ord576
ord100
ord689
ord610
ord616
ord617

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 852B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ