3b56abd688b855bed71e0143628d10fe_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b56abd688b855bed71e0143628d10fe_JaffaCakes118
Size

84KB
MD5

3b56abd688b855bed71e0143628d10fe
SHA1

ac5f5e741805fa1c0f2b7bb7a6c2b37e06a38aa8
SHA256

002fb9ca2e221a29bfc63ef438ee383bf7dec108e445e2e230d23b634e8d7818
SHA512

b9e152a48227e1d3d1858c00297b8630aac4f329c7de13ac1c08561afd909f715b2cbf4316b865615b723d054a1572437e58ceb2871a015654a9d5e65011e3e3
SSDEEP

768:WT3Omh1bheVmAnlqnns2VqOkg6EdNG9OwkhQbIfiXXTAZGZ0TbFyOsST3/16dTMW:WwVxakOGZFXTAZGZ0TbF1/T3ETZrx5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b56abd688b855bed71e0143628d10fe_JaffaCakes118

Files

3b56abd688b855bed71e0143628d10fe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

12f6f35d85973d0677235cff2afe1440

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord608
ord717
ProcCallEngine
ord537
ord644
ord573
ord681
ord100
ord619

Sections

.text
Size: 76KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ