3972b94ce2a69988a5330c2e9cf11e22_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3972b94ce2a69988a5330c2e9cf11e22_JaffaCakes118
Size

52KB
MD5

3972b94ce2a69988a5330c2e9cf11e22
SHA1

425ea85555b167bb18bd4a8040775b88e42327e1
SHA256

d917045c4ce9b23e3fb172348b48b7fa009106fd172ce468eb4749ed6a3501e6
SHA512

ff6d5136677ff37d504c1f04c11456cdd4917e3f902664c0edcee1197116cad50168ce2cff44ddba78c069728a502eaf7937c22d5b6ddd36949af1741711712a
SSDEEP

768:CDfBhxmffnR7FIk9d+x2rPNx2ARFkgFJ0FCY0NMRJxxpY5mqIqgq0qUqvgQyKYYP:CzBiZv2z0NMhYDs1U1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3972b94ce2a69988a5330c2e9cf11e22_JaffaCakes118

Files

3972b94ce2a69988a5330c2e9cf11e22_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2b2808df095a4e08c041224a1e71be42

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
MethCallEngine
ord598
ord520
ord632
EVENT_SINK_AddRef
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord537
ord644
ord645
ord100
ord431
ord617

Sections

.text
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ