f3a8f0f01f8d345ad90e02cc29392cef_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f3a8f0f01f8d345ad90e02cc29392cef_JaffaCakes118
Size

5.9MB
MD5

f3a8f0f01f8d345ad90e02cc29392cef
SHA1

d1d866f1896153e46a489ce959dd8e05cae1da0b
SHA256

ea30ef95e82d103ca724d51b2546d27bc117f7c559e2ee82decafcbdbc56f364
SHA512

14e2254c3c735088f4964d11df41513f000eeabb1f27f3f00be0ce46d410acc56ef819e3403bb780facb4b734c462d297010a27b7022d8bafb13525d1c2b6986
SSDEEP

24576:5V8gLwAa/QpKzWAM8Mauu7i9EzNXqx6sIpFXOv/kFQGITW5tWbgtQJT38YJUvccO:5y+QMBSOvsDGWztWFrxMVE0kv2/7O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f3a8f0f01f8d345ad90e02cc29392cef_JaffaCakes118

Files

f3a8f0f01f8d345ad90e02cc29392cef_JaffaCakes118
.exe windows:4 windows x86 arch:x86

99775c4321d75ab8150cc78cf58efe78

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MulDiv

msvbvm60

ord696
MethCallEngine
ord558
ord595
ord304
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord310
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord312
ord711
ord717
ProcCallEngine
ord100

Sections

.text
Size: 5.8MB - Virtual size: 5.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ