3b6af53eb36547c9e353732401366c12_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b6af53eb36547c9e353732401366c12_JaffaCakes118
Size

72KB
MD5

3b6af53eb36547c9e353732401366c12
SHA1

7fe53c5cc1b8663e71e6c77d22ff62921486f9c0
SHA256

5abd3c54e6063c5d7343302204d208b03706b78f28b620172375d641e4f65b79
SHA512

dd800ccd5390138937166f9898777081891e0cf24b9546060f6328e1cd21b94cbdbc0e7eaaa8cc032af5f1ed4846e2ce544de1e3c79adeaca03ae32b3c2be994
SSDEEP

768:Fnot13Ol2ioOl2aZjOl2PnOl2yxR6CCq/U+jPOwt6n0BP0kawtSR6CCq/U+jP9Ok:ZoerrXCyOD9V/R0J9VoHyeXarb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b6af53eb36547c9e353732401366c12_JaffaCakes118

Files

3b6af53eb36547c9e353732401366c12_JaffaCakes118
.exe windows:4 windows x86 arch:x86

32a9f0545ea6f545fb774aa87dc87385

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord518
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord716
ProcCallEngine
ord645
ord100
ord617

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ