31b350c87da6b7472ddb25e604b7d7c3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

31b350c87da6b7472ddb25e604b7d7c3_JaffaCakes118
Size

67KB
MD5

31b350c87da6b7472ddb25e604b7d7c3
SHA1

30e3c898ce03cb8564befb58151af07956fde79c
SHA256

3c33a66444fe1a1dd51c9f9c691b940040a8d061f38e74c64e77e5d66845247e
SHA512

c52d47c2f4e1961e749953158ed48207a43b26f1197fd2d8003976d3a9464b84329e44c6ac9c4ee21e6b65a4c590fa520a23e6bd842c60a6673c2890d1ec0f4a
SSDEEP

1536:JoCmEmSHxmqsGAuu1gDNRvVAVmZDothGA9Rf+YKnHh1:Jmcxu2JVVTyzjP6HH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31b350c87da6b7472ddb25e604b7d7c3_JaffaCakes118

Files

31b350c87da6b7472ddb25e604b7d7c3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9a57735aefbdd11a23987eeb50935f70

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord698
ord598
ord631
ord525
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ProcCallEngine
ord570
ord648
ord578
ord100
ord617

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ