0ff7f25377dd079bc961fa892309f897_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ff7f25377dd079bc961fa892309f897_JaffaCakes118
Size

59KB
MD5

0ff7f25377dd079bc961fa892309f897
SHA1

618c92ed02281bcbed17e455140cdac513843ee7
SHA256

f73c41c1a2fd351b19a0226a1a7f8702cd91a086ab848fa40510ab55d40192e2
SHA512

14b7074fc49d9242fb3d750c5748ffe4d56a4e39d89041c816837afee3a55673da4fd193f6a2f662e33efd1f42b2baac91c19f76c9d51d619c900f0661741eaf
SSDEEP

768:+P8iQkoZuIELROozPdsZ7lTgiT8VhJgNFyhE5xPKND7BoxTw9MsQsjyl6Scicc2k:+xquIWRpzVGTFyaiN6x7AjylfLZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ff7f25377dd079bc961fa892309f897_JaffaCakes118

Files

0ff7f25377dd079bc961fa892309f897_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a44c5c92366aeb5eb5f483371fe59586

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord626
ord593
ord598
ord631
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord713
ord607
ord608
ord717
ProcCallEngine
ord537
ord644
ord648
ord570
ord573
ord578
ord100
ord616
ord619

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.YANAG
Size: 512B - Virtual size: 4KB