3a505eb295bfd4439ef63d946d0b8cd2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a505eb295bfd4439ef63d946d0b8cd2_JaffaCakes118
Size

1.0MB
MD5

3a505eb295bfd4439ef63d946d0b8cd2
SHA1

80010ffaebf28e54a3d9ad8dea101a53de1702ed
SHA256

95c5cc07b0c7c775f06b277d3bba78dca627d633e55640642c5f063c677366e7
SHA512

1039fee40c3752a55276497f644b4108f10725ac8eb454f7f4db07dc0159246b4822f8e9bfe74dea986319c8866bfe219e72ff6552a426ec304d5e2e1f3b1eab
SSDEEP

6144:kV+v4S0f+XGnJyWgL95QoDbzlv1T4kBktqw/azfp+4:S202X5d4/az

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a505eb295bfd4439ef63d946d0b8cd2_JaffaCakes118

Files

3a505eb295bfd4439ef63d946d0b8cd2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7fe3aca908f9dce9e5152f6dcab82bbf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord620
ord516
ord660
ord300
ord594
ord595
ord598
ord306
ord520
ord524
ord631
ord632
ord525
EVENT_SINK_AddRef
ord527
ord528
ord529
ord561
DllFunctionCall
ord670
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ProcCallEngine
ord537
ord645
ord570
ord648
ord573
ord100
ord610
ord612
ord616
ord617
ord618
ord619
ord650
ord580

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ