JaffaCakes118_0b611c2a068464b5e159c42a52323e8f | Triage

Sharing

General

Target

JaffaCakes118_0b611c2a068464b5e159c42a52323e8f
Size

204KB
MD5

0b611c2a068464b5e159c42a52323e8f
SHA1

90cb86e2e5795a8266b6a416f017fb8aa08454c0
SHA256

f016ca0df3328d1c9e1a700005a868e138be98b21e9057bb779ee46f1f41976b
SHA512

f6cee97f346e319b18d2703589df7e974dd1f464a87a04d3df9efc82efb8223473725b5f45aa4095d059afff9d80e0d6f1e88b1d06a39b3542d49f55cbb6d77a
SSDEEP

3072:IVLWUJOubym6q/iU0XrxIh1V/mxIPTB+7GBuZmr/xo7vpavphHD6q:gp6q/iU0Xr+hGATEaBuZKC7vYh9O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_0b611c2a068464b5e159c42a52323e8f

Files

JaffaCakes118_0b611c2a068464b5e159c42a52323e8f
.exe windows:4 windows x86 arch:x86

f1a0d68685115264a6f5465b79f04ffe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord666
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ord716
ord717
ord537
ord644
ord645
ord648
ord573
ord681
ord100
ord619

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 184KB - Virtual size: 183KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ