3816adbd4009afa76fe739c954262a02_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3816adbd4009afa76fe739c954262a02_JaffaCakes118
Size

1.5MB
MD5

3816adbd4009afa76fe739c954262a02
SHA1

dddde40d599fa259d6747e6449f47c2f34512f3a
SHA256

e7dcc25d1046b27885a2632e9fc484f407ea7f711e29bf0a2a1a0652cf42dac7
SHA512

e9436a7e03b61dab3677df165947711966a372f402ac1f9ea604b702e8cd36fa3770688df9491d36d343001d26e09613d00c2c08761d6827735451db321b65b0
SSDEEP

24576:jyfHSrg4+pt4glO1+qdUUv1heXrLTwKygSwnZrN6J:dgRgglO1+cYVn9Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3816adbd4009afa76fe739c954262a02_JaffaCakes118

Files

3816adbd4009afa76fe739c954262a02_JaffaCakes118
.exe windows:4 windows x86 arch:x86

197025987e4f080d692be85f7dd525e9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord517
ord519
ord666
ord593
ord594
ord595
ord598
ord599
ord631
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord713
ord607
ord608
ord717
ProcCallEngine
ord537
ord644
ord645
ord570
ord648
ord576
ord685
ord100
ord616
ord617
ord619

Sections

.text
Size: 524KB - Virtual size: 523KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 992KB - Virtual size: 990KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ