0fb467e413ce6cf2a59154471e8017d9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0fb467e413ce6cf2a59154471e8017d9_JaffaCakes118
Size

31KB
MD5

0fb467e413ce6cf2a59154471e8017d9
SHA1

d87f0fcbb5005b16cd89aefc24eaf555e2513b10
SHA256

eecf55ab7d7b7e1ec7796b7de7d59c2a26869ec08f047d5be3499c503bcbe6bb
SHA512

67512ec554b594186efdb6e45c03c8a4cee8dd4c813ccd0f39dd84311c98f138e78a947e33d11f34f2e56032c4897490b85d473c689def0610c738943633423b
SSDEEP

768:QJj3dfYZljmkR6DVWl8zHPHXyXHCzcHHvzQBdi9vc:QJilykRiVWl4vUv4Wvc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fb467e413ce6cf2a59154471e8017d9_JaffaCakes118

Files

0fb467e413ce6cf2a59154471e8017d9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1cb01938b76b509cfd5211e63abab8b1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvbvm60

MethCallEngine
ord517
ord518
ord593
ord594
ord598
ord631
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord717
ProcCallEngine
ord537
ord644
ord570
ord648
ord573
ord100
ord616
ord618
ord619
ord546
ord547
ord580

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ