3ad6c0617310064ac104701ee248db16_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ad6c0617310064ac104701ee248db16_JaffaCakes118
Size

42KB
MD5

3ad6c0617310064ac104701ee248db16
SHA1

4e9fa3f4934bb7eb0f26b18d5dc81d9e5b0b65f9
SHA256

6e54e76ee2f8f2e1dfa6dff0fdd52ae4c7f80b7a47bffebb125203b275679e49
SHA512

6466b52553c0c3fec246948de7952878b8d07643f92cd6c34c0f87d3236fea6101e6a7ea3f5a8f40b3de6fece03449ea2c29bef5434b9cd4b17ee0b29bde1cfb
SSDEEP

384:+bJwLMO4BncfQVIw5qpuUx+X6IKuJz5Y0pJ576ZZ2SexNI/lZ2s:qOAcflp/x+HzCuJzpNI/lZD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ad6c0617310064ac104701ee248db16_JaffaCakes118

Files

3ad6c0617310064ac104701ee248db16_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9414d543aa0943e84fb17dbeb35247c7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord517
ord593
ord598
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord644
ord570
ord685
ord100
ord616
ord581

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ