3993eee7a914b5e4a2265afaa1191860_JaffaCakes118 | Triage

Sharing

General

Target

3993eee7a914b5e4a2265afaa1191860_JaffaCakes118
Size

104KB
MD5

3993eee7a914b5e4a2265afaa1191860
SHA1

20db91888d76ed2d2d7c3d96405d48361bf55614
SHA256

1fc1f278d63962b9486ce4fd2bd8a8587f9d7b5e455f803ee8ecedc09b0a2804
SHA512

66a8955bbf8d81c341b2988c15002e46824783d973953d1ab8ed82dad2412aaf31627a2237aacb639b681897efd27d7210a5df6e21420a55f25dc5c9770c4dd9
SSDEEP

1536:xnaWqrf2gtsUZzd/N+UsoGHfBb/LbtFsaN1DJFC8cNXSemktawMRf:xaTf2gtLbN6t/NvDJFC8QScQRf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3993eee7a914b5e4a2265afaa1191860_JaffaCakes118

Files

3993eee7a914b5e4a2265afaa1191860_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b375e39f8789211da567f4232024c6f9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

expsrv

DllFunctionCall

msvbvm60

MethCallEngine
ord516
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord644
ord100
ord617
BASIC_CLASS_AddRef

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 84KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ