0f99ca6fd3ee36c12313aaeef767a967_JaffaCakes118 | Triage

Sharing

General

Target

0f99ca6fd3ee36c12313aaeef767a967_JaffaCakes118
Size

429KB
MD5

0f99ca6fd3ee36c12313aaeef767a967
SHA1

50caab3a4d53efa6ae2ad09268b78c757926035a
SHA256

c0d5a0b5776ef36c55db298e0393ae04b31c585f41f8e4b958b6eb5ed7fb6184
SHA512

7e63fc0a4b8e43145b140f4e9f076308c5b79f0df1adf4f70381434dea2fc62ab74a41609119a63536847108813e9216dee66b8b3d619ee73634d3fd35ac97fe
SSDEEP

3072:PtTNTWY+k1khUyG3juFEI1ZCM1PqG9pT632FszuZMrBl2BcD4rCjL/r2pMg1wbD6:P5ZWKul2NCOL/wMwwbzCZ1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f99ca6fd3ee36c12313aaeef767a967_JaffaCakes118

Files

0f99ca6fd3ee36c12313aaeef767a967_JaffaCakes118
.exe windows:4 windows x86 arch:x86

73b59cf8bd0aa16adbf369d0f5f5c768

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord593
ord594
ord631
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ord717
ProcCallEngine
ord537
ord644
ord648
ord570
ord573
ord681
ord685
ord578
ord100
ord619

Sections

.text
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc_0
Size: 55KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ