3b0fb9156d80e4de85bf99011be1fbdc_JaffaCakes118 | Triage

Sharing

General

Target

3b0fb9156d80e4de85bf99011be1fbdc_JaffaCakes118
Size

359KB
MD5

3b0fb9156d80e4de85bf99011be1fbdc
SHA1

656fc3942429ff0c14aafc11ffb1256ed0d2c852
SHA256

b64e319527cfaafaaacebcb7b98b0db511c4677b281a7431adab64a7c2753c95
SHA512

d49b22316743ed8713097e07acb3100ab2eeb0fb3adf831c758920e33338dedce4a99d029ced0e88b05a513058f63b498b213f86666d27b363b3954e328a79c3
SSDEEP

6144:JvSDbPVN42N/9GZo7dsyIwoxL87KQxxxqnVuYv2mvZaAf6WyCmujfTJnS9f:JvSb/9GChsyhVTJQsYFZaA9mkNe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b0fb9156d80e4de85bf99011be1fbdc_JaffaCakes118

Files

3b0fb9156d80e4de85bf99011be1fbdc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

77d88769b8f7fc9bf33366311262161b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord666
ord598
ord520
ord632
ord526
EVENT_SINK_AddRef
ord561
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord645
ord570
ord573
ord681
ord685
ord100
ord613
ord581

Sections

.
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ