303a873227f6baab352e17d75500b03e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

303a873227f6baab352e17d75500b03e_JaffaCakes118
Size

780KB
MD5

303a873227f6baab352e17d75500b03e
SHA1

b3210bccc92b5284fdf4e7fee74bb2801fc78fea
SHA256

3581758a04592a770de7164975c95ee6473c2a3604c9982faea03ad989598bb7
SHA512

215b90852540e5158286904ea1ad443a41ecc02a7f52d681298b059ae4727267adf10af426a5d1d6ee5175d190dc9072ea1d91e001ac31908522a0a504903226
SSDEEP

3072:1PH96dMOcqCksRp9IILZ9U652V4l4aAeHjw68Ywajih0aU4nDNA53Znvih0aUS4+:htXjUEFPBFPwjU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
303a873227f6baab352e17d75500b03e_JaffaCakes118

Files

303a873227f6baab352e17d75500b03e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ae4a4418d7e052a4c797fed4c284755a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord717
ProcCallEngine
ord644
ord537
ord572
ord573
ord100
ord619
ord581

Sections

.text
Size: 632KB - Virtual size: 631KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 144KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ