f3202a8c650ff8a944539936c6b82694_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f3202a8c650ff8a944539936c6b82694_JaffaCakes118
Size

40KB
MD5

f3202a8c650ff8a944539936c6b82694
SHA1

3bb96f9a52d8b72baad795a7b2f7d0c07bfa45ea
SHA256

54e1ff92cc71db19b963012dd0418394d593e807faa9f90016ef639412c186c2
SHA512

f1ce00bfd01b965e37dc45c6ebe9cac4be3aba32191976ae3dd2f2ab1d9f441a11d6822dce01277f7536df3132438c33a7f4cb39cd5e045a4a465bb806e38109
SSDEEP

768:tkLkhWQehlDOk4e8Cc+Shm1pxktuI3DuEc5jHVhJG:tFIOsShm1pxkYI3DuEcdJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f3202a8c650ff8a944539936c6b82694_JaffaCakes118

Files

f3202a8c650ff8a944539936c6b82694_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c2411b307c844fced011ccb8ad0cf335

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord558
ord593
ord598
ord631
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord607
ord608
ord716
ProcCallEngine
ord535
ord537
ord573
ord100
ord689
ord616
ord619
ord581

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ