3079b1b37ae150fe1e886d81753c438e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3079b1b37ae150fe1e886d81753c438e_JaffaCakes118
Size

728KB
MD5

3079b1b37ae150fe1e886d81753c438e
SHA1

9cac5998df0d990cd719ecd159146cd6fa26bcc2
SHA256

7fd0bcff207a36d2a8c45a2eaaed7cf3f4cedb589a9df85d9f9f5ba68886ba5d
SHA512

3d9485c320c2f770edb13dd6a6a898dafde371ec8e0465bad8a0c862ae12b1082a9d792d85951c16607853459d8560294ea9128bf58a8abe0116cfac51223cf7
SSDEEP

12288:+Tl0UgDcSlx/AUhBUaPt4HyZkpNIsiL7yi:O2DFpAierGUIsiL7yi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3079b1b37ae150fe1e886d81753c438e_JaffaCakes118

Files

3079b1b37ae150fe1e886d81753c438e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

36d2793f488a3c633008cd2a7e3c3e95

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord585
MethCallEngine
ord516
ord663
ord557
ord664
ord666
ord591
ord592
ord596
ord520
ord708
ord633
ord526
EVENT_SINK_AddRef
ord560
ord568
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord710
ord531
ord641
ord536
ord537
ord539
ord571
ord682
ord685
ord100
ord689
ord612
ord613
ord616
ord542
ord543
ord545
ord547
ord581

Sections

.text
Size: 680KB - Virtual size: 678KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ