3a5330ce9218bb08daee6ea047d67392_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a5330ce9218bb08daee6ea047d67392_JaffaCakes118
Size

184KB
MD5

3a5330ce9218bb08daee6ea047d67392
SHA1

460983d3f317524356bbe2802b589ddac0ee81bb
SHA256

cc5e98cee88134ad1fd28cd751daedcb9cdcd59e8cdda963af5c76b49822bc3c
SHA512

dac231f51190a40b9738cd5661641c7224dc6105a135c96410bfb04ad2b751967aa0cbd937af3fdc57f0874f9310253cf2a56cc16df1e9515798d1995eda2706
SSDEEP

3072:w/Y+7IXdeOnVLyCGuVbh9sfp0Rip/j1B/e:67CtJh9sfp0gj1E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a5330ce9218bb08daee6ea047d67392_JaffaCakes118

Files

3a5330ce9218bb08daee6ea047d67392_JaffaCakes118
.exe windows:4 windows x86 arch:x86

74f655c841a2ad90aa9834eed25a8075

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord665
ord709
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord608
ord717
ProcCallEngine
ord644
ord681
ord685
ord100
ord616

Sections

.text
Size: 176KB - Virtual size: 175KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ