3bb1ea3035e2b33319f90bc6cd2cbff3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3bb1ea3035e2b33319f90bc6cd2cbff3_JaffaCakes118
Size

72KB
MD5

3bb1ea3035e2b33319f90bc6cd2cbff3
SHA1

0e719ce6ae4fa06b9be59ea653cddb7228e76c6e
SHA256

8a66b7b7d4b81233a880924cefbfd2e0f7f2376f9ac3b386a5f63463e2675e82
SHA512

04a9891dec8b15e8df196c96d27b955c322348fc04460c5a83966e79d1d59e7882d3ab1e7bf20f153dc9851c1fbaa5becf8f5bb2a8b663c0cf0b8f4ad867113a
SSDEEP

768:92yjvAASAQtu/QsSxhb8V/m/bZA1iFwDSfw/D+b+D+x+l+f+z+C+l+c+K+j+I+XJ:92QQ+q85CasfwaOJt3y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3bb1ea3035e2b33319f90bc6cd2cbff3_JaffaCakes118

Files

3bb1ea3035e2b33319f90bc6cd2cbff3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f12fa16399a9fee492a4eaf85cbf725f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord583
MethCallEngine
ord517
ord518
ord593
ord594
ord520
ord709
ord631
ord525
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord716
ord717
ProcCallEngine
ord537
ord644
ord647
ord570
ord648
ord571
ord573
ord576
ord685
ord100
ord689
ord616
ord618
ord542
ord580

Sections

.text
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 908B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ