3b1bc30c6cfaa3eb3060510c72ff0453_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b1bc30c6cfaa3eb3060510c72ff0453_JaffaCakes118
Size

148KB
MD5

3b1bc30c6cfaa3eb3060510c72ff0453
SHA1

5dcceb671ad6963a00d13d18b528328f2b8c402d
SHA256

60d94bfc6e45939f0e3b547d72b89908888dcf386564b255259123f470b36dfb
SHA512

21bac0026b00cc077da12373c50996be2ba96bcb933e2c99b102e8823ef1a88b5612788be14b562de5ce8ab9e8681c7fa0d46568a904d5d5512d9fb9009f77be
SSDEEP

3072:3I4ALsI5cQozBq1oylpThSqJbDvooIERa/dEqbB1cgtAkbLVKyUIWLUJ7XtxZex1:8/SqJbDvooIERa/dEqbB1cKQZUJ7XtTW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b1bc30c6cfaa3eb3060510c72ff0453_JaffaCakes118

Files

3b1bc30c6cfaa3eb3060510c72ff0453_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c6e4e226620a1dbbbc354fff9c2af5c9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord595
ord598
ord709
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord713
ord607
ord608
ord717
ProcCallEngine
ord537
ord644
ord570
ord681
ord685
ord100
ord616
ord617
ord581

Sections

.text
Size: 140KB - Virtual size: 138KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ