35b3892d51ecd98e4897a37a42aa17a6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

35b3892d51ecd98e4897a37a42aa17a6_JaffaCakes118
Size

52KB
MD5

35b3892d51ecd98e4897a37a42aa17a6
SHA1

be68235eb1e74b65e12cb1d7fb8e4f71cc08bb3c
SHA256

d39d40154b02efdcde0dbf2f00bffe8ecff82d2e94e0f8f782e21a5224ee0baa
SHA512

d0e1d9cd35f5e61b4af353e8c0fb5e5c95a4063a3cafded2cdbf7be2dd6112b2e4e37cb53befaca053093b257b2839d6a9b8f50a1127b4400d5def92aa7bb4a9
SSDEEP

768:dX4aSDYodu/zxusMmYouXwm/QjbuOJdgz3gRG3UC1j/xu:dXqDYodImEvdA9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
35b3892d51ecd98e4897a37a42aa17a6_JaffaCakes118

Files

35b3892d51ecd98e4897a37a42aa17a6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

51fc520264568a9e6e33013956d35dcd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord518
ord593
ord594
ord598
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord717
ProcCallEngine
ord535
ord644
ord573
ord685
ord100
ord616
ord617
ord619
ord650
ord546
ord581

Sections

.text
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ