0fd9b077bb6d546a4cc8f5fdb84d9dc5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0fd9b077bb6d546a4cc8f5fdb84d9dc5_JaffaCakes118
Size

96KB
MD5

0fd9b077bb6d546a4cc8f5fdb84d9dc5
SHA1

cbcf21d1f1ba8756d89080b1b409c8873823b6af
SHA256

0e4b404a5550a2cf3ff05a22ae32c1c132ebd59af199a2591b76095dd4e1c138
SHA512

9df4ad1f91ad8213e377b71c7df2cc13acf9ec20e851dab1511ed667ae08dad823a04d28d8e21e7cbdc9ea0da2d3876982facd87d6435b324ba223de12da8c79
SSDEEP

1536:IbiNy7lmiztK66SFGx/xE6IbdvuCoDjXwsrtHT9/hJuF9PJRv:IB7lNL/0IczhHT9/W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fd9b077bb6d546a4cc8f5fdb84d9dc5_JaffaCakes118

Files

0fd9b077bb6d546a4cc8f5fdb84d9dc5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

97553e1bea71ea25fba9b13a8ed02af7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord519
ord598
ord631
ord526
EVENT_SINK_AddRef
ord561
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord644
ord537
ord570
ord681
ord685
ord100
ord581

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 652B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ