3227b6d345cabac1e9248c9d61270028_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3227b6d345cabac1e9248c9d61270028_JaffaCakes118
Size

96KB
MD5

3227b6d345cabac1e9248c9d61270028
SHA1

041d6871287826bd6053e60e184628f774ac4745
SHA256

1afa4d7f1cc6eab7d8f65d24a18cdf2bea43cee479a481f7de301b1f4e3e22b7
SHA512

579ebd034b6126766e0b23dfe13e6791beb22ede762eb15da17df942df1fa8985268615a7d92ee407065b252a04478a95f69bfb718fd29adf3d56d24746bae4c
SSDEEP

1536:4nsiMTkfHRG91Ev/HRydzfjVujfxuy62yfOFLqwrGCgmpd4m3O6:4nsiMTF1Ev/HRydzfjVsQL29qwrQm8mf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3227b6d345cabac1e9248c9d61270028_JaffaCakes118

Files

3227b6d345cabac1e9248c9d61270028_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c6450c9cda7e212788b282515f646d72

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord665
ord593
ord594
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord537
ord644
ord100

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ