3821bc8cbe8e9037ab2c28def1974641_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3821bc8cbe8e9037ab2c28def1974641_JaffaCakes118
Size

544KB
MD5

3821bc8cbe8e9037ab2c28def1974641
SHA1

a3ef7bdb2c49dbca6aee75bda67d75245ccf7856
SHA256

494d220985b16963ee78a35b174216cd0031e48cd5cdedfbca114ad471af2495
SHA512

85b7ff559a5eccf549b02c79cff6a588174ec87ff7612e5746c319ddae9d7501b5bd821d5fa8e2393251a033cbffb7cc87a3535cf24861bcc4ed893ce82c8a83
SSDEEP

12288:HsiFI/us480oCnoxnoJ3HLCKuXYPZvH9PW:nwibtvVP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3821bc8cbe8e9037ab2c28def1974641_JaffaCakes118

Files

3821bc8cbe8e9037ab2c28def1974641_JaffaCakes118
.exe windows:4 windows x86 arch:x86

eb3ee011f43fa83c07590eb2c8251182

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord660
ord666
ord595
ord702
ord632
EVENT_SINK_AddRef
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ord716
ProcCallEngine
ord681
ord685
ord100
ord543
ord544
ord546

Sections

.text
Size: 520KB - Virtual size: 519KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ