3a87428901ca44473317f2aa063fcf57_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a87428901ca44473317f2aa063fcf57_JaffaCakes118
Size

12KB
MD5

3a87428901ca44473317f2aa063fcf57
SHA1

78ee06ab0e29a4455df6abbd779bf50619dc4d6a
SHA256

e101ee93b1815e055279e38b52b67d76778ccd9da5d22eb04409f7579c08cf60
SHA512

7f508f1eb6bdf54c85150a53ed1511e04187b5775a94ac6949fac04549181c75510b1d26d0efdd033eaf74998d3ae4689b516c2992ad4af794011d5eae0b3afa
SSDEEP

48:ygieYH3HcO+2n2MOGWkGIsbCP8SeZOujmIL5Ur8w3wn1K2:CxXN2MOs8CYZOuj5L5U4Ps2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a87428901ca44473317f2aa063fcf57_JaffaCakes118

Files

3a87428901ca44473317f2aa063fcf57_JaffaCakes118
.exe windows:4 windows x86 arch:x86

aec489a4d5486864763072afeb434d1d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord100

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ