9f0a928a4ba3f1d39d9dca269be20bc1_JaffaCakes118 | Triage

Sharing

General

Target

9f0a928a4ba3f1d39d9dca269be20bc1_JaffaCakes118
Size

29KB
MD5

9f0a928a4ba3f1d39d9dca269be20bc1
SHA1

6454d1918f5be55524b1e70b3ff84973803d43f6
SHA256

82d95335a38f67a5b8e98ea57b96a0a60d7380652448004128784581ce865082
SHA512

749096ba87a24766e56ed60f12e09fd76fef42e82719160e279e68f53cd8246dc350ec98fbf518b86700a710c873dc44bb2217e04b083d0218b5860cb2edf33f
SSDEEP

192:WeynVASoObxuSk5Yh2bKmiDKqdLEt+kvRDhXXPGlv/XJ9WXXi0qXXiCl0yD38UR8:sz47q+FqlEDJ1XXS/XmXXwXXnQDf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
9f0a928a4ba3f1d39d9dca269be20bc1_JaffaCakes118

Files

9f0a928a4ba3f1d39d9dca269be20bc1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9c3894d9e6f15f66cba78a0933e77d32

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord713
ord608
ord717
ProcCallEngine
ord644
ord570
ord681
ord100

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ