3f1079a42d9d371fb84e7f90140e6e4d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3f1079a42d9d371fb84e7f90140e6e4d_JaffaCakes118
Size

168KB
MD5

3f1079a42d9d371fb84e7f90140e6e4d
SHA1

713fd320fe9684f4a963b4f39c249b812100f4cf
SHA256

09949fbb24809d2cbd60292f55155780f97223b3681d373155d5c14d8092c44e
SHA512

15f3c975c158df2053b053fa876bfd820d359f66b7ebac9e11ba71e1787883e7112b480a6f17c0fe9eb87266e9ecdcf1e6c7364f97ae4e4a1f863259de0dbf57
SSDEEP

3072:TaL4+Q8wJno2maGltEIuOz4P0qgkoQOpO8MCJE4v9:2Blw9MRltEozXrxIh4l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f1079a42d9d371fb84e7f90140e6e4d_JaffaCakes118

Files

3f1079a42d9d371fb84e7f90140e6e4d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

245d0c9571da1e629d06be1c73695cd6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord518
ord628
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord608
ord716
ord717
ProcCallEngine
ord644
ord537
ord648
ord578
ord100
ord617
ord619

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 140KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ