3b22ce0197b798051e60785e4de79957_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b22ce0197b798051e60785e4de79957_JaffaCakes118
Size

300KB
MD5

3b22ce0197b798051e60785e4de79957
SHA1

0a85cc4863278dd6fc597d918b34433cda0451ba
SHA256

27286067936712c32b63af1fba59cb727417fe576169975f78d3f8479ec383de
SHA512

7bc0f01014f137e3f35744a861e9c4c9ec9fc907a32f17cdf4c5b6f7aff53552171aa264a6dee0cd489e2f60d9c5ef89b8ca2f8f6fb47ed8754365afe7f17890
SSDEEP

3072:qweieGDkvpd2LdA6Xd4XEvbwXY+FSd467SSWI+ojjJLTEZcvod9F/nZIUhNCiNOc:Kubw5kC/u3l2x//7iUeL+JPRkB/0WHI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b22ce0197b798051e60785e4de79957_JaffaCakes118

Files

3b22ce0197b798051e60785e4de79957_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7be2376db55c1befadbe8b000f32192a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SystemParametersInfoA

msvbvm60

ord696
MethCallEngine
ord516
ord518
ord519
ord666
ord667
ord593
ord594
ord595
ord709
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
ord561
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord607
ord608
ord531
ord716
ord717
ord534
ProcCallEngine
ord644
ord573
ord576
ord578
ord685
ord100
ord616
ord617
ord618
ord619
ord580

Sections

.text
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.
Size: 175KB - Virtual size: 176KB