3e1fff0de5cd76241fc7d9256197be95_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e1fff0de5cd76241fc7d9256197be95_JaffaCakes118
Size

632KB
MD5

3e1fff0de5cd76241fc7d9256197be95
SHA1

edcf33a158c4a201823f38ad22842ed8bcf33a97
SHA256

f41361a5e1d551a33ab1a6f096050bf131959a2111386d3fd95eecadc03f7b06
SHA512

0831415f0787eeb2cd74282e999a4096a40eb1afbb666a608f4c1c4a8643a6e9a3735236a7aee5ee2fca55309be69066f4f7fc23586e596af96973ad0af3853b
SSDEEP

12288:8HaphFXgsh7RnmyNdO+pqpIKOwWfQxK/feQuBVpMBGxy0Ql/:SaphFXgshZmyK6K6JR0K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e1fff0de5cd76241fc7d9256197be95_JaffaCakes118

Files

3e1fff0de5cd76241fc7d9256197be95_JaffaCakes118
.exe windows:4 windows x86 arch:x86

80f7846d7ce96047cdc7509805dd46f7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord582
MethCallEngine
ord628
ord708
ord632
EVENT_SINK_AddRef
ord569
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord100
ord615
ord616

Sections

.text
Size: 612KB - Virtual size: 608KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ