0303c1a295cdc4039388dec4ae076e9e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0303c1a295cdc4039388dec4ae076e9e_JaffaCakes118
Size

172KB
MD5

0303c1a295cdc4039388dec4ae076e9e
SHA1

d1561621b931fe2312e573a9f5ecb00e79c97224
SHA256

9ed712471fa7b5fd57341528c1a16691f5c9cd0a18ba76c910ae3e5236aa2375
SHA512

b9fdb0b5f42b3e5fa24c37fc542c5c59f4f14e27d3acce509170f5a750e69880c0865448eff1125665975582da9362362df4a0568ff7f5bf848f0c922fc8f6a9
SSDEEP

1536:0JiukMPwL22ATrWcblWcbMRJ3GRnXngJCgMi/h9a8:0JiKQur5x5ARJ3GRnZg/59a8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0303c1a295cdc4039388dec4ae076e9e_JaffaCakes118

Files

0303c1a295cdc4039388dec4ae076e9e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a48c4220a71a75a659358f4cb82a5d0a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord626
ord595
ord598
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord716
ProcCallEngine
ord645
ord570
ord571
ord576
ord100
ord617
ord581

Sections

.text
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE