3c9bb4e1dbfc679061a091531f5f4031_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3c9bb4e1dbfc679061a091531f5f4031_JaffaCakes118
Size

592KB
MD5

3c9bb4e1dbfc679061a091531f5f4031
SHA1

86350b93fc6c0e450ce8fbfe9ba10509abe0e2aa
SHA256

b802ad26eff57372c50b27a1677b83967aa37bfe83046e6fa19ee38e6d17aeac
SHA512

e15b694e54f32663c062b0c60066caa1ed578c614f0e21a4d5d00b0d75368e4dc06c9374c75a840ddd33f6324c8ba77af1f2c75b8fb0741cb489e2b99c4570f1
SSDEEP

12288:16fNBi45snL+/+rAhab69SqXROzu6TNdp2lYE6sR:1kNBGL+2Bb69SqhuuGglH6s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c9bb4e1dbfc679061a091531f5f4031_JaffaCakes118

Files

3c9bb4e1dbfc679061a091531f5f4031_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bdefe55343bc2f6b0d0bf4c7212cf657

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord587
ord588
MethCallEngine
ord709
ord632
EVENT_SINK_AddRef
ord671
ord678
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord716
ord531
ord685
ord100
ord616
ord617

Sections

.text
Size: 572KB - Virtual size: 571KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ