3a473eee57ecbe1bd31e1a726356fb8c_JaffaCakes118 | Triage

Sharing

General

Target

3a473eee57ecbe1bd31e1a726356fb8c_JaffaCakes118
Size

68KB
MD5

3a473eee57ecbe1bd31e1a726356fb8c
SHA1

39d5927a2524d598e855759988f35e1abeeaebec
SHA256

812e144dfcbe5993cb2b9b973062889239df607b155146cd5c498f3f2d5cd0b1
SHA512

3fefe8c6a528305c859efbfb0bd5380d7ab4a552eba8231ae01c988ebf23f149082e3810a861def1c24fea11b1aa4bccde4be4d2b15e70964a711bfdd4113415
SSDEEP

1536:SJQCg3Yf/guD8nIWclg2yG3iEoWTb4cQH8:BCYYfAIPlg2yG3z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a473eee57ecbe1bd31e1a726356fb8c_JaffaCakes118

Files

3a473eee57ecbe1bd31e1a726356fb8c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fd5172696af861554a5affbc3ad604cb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord666
ord595
ord631
ord632
ord525
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord608
ord717
ProcCallEngine
ord537
ord644
ord100
ord616
ord581

Sections

.text
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ