3ca45770ee9332952d81336c40cb6750_JaffaCakes118 | Triage

Sharing

General

Target

3ca45770ee9332952d81336c40cb6750_JaffaCakes118
Size

83KB
MD5

3ca45770ee9332952d81336c40cb6750
SHA1

2e948c9be8ee6a1ee247d9065ad0a7f0d83d49a0
SHA256

fa201c12e53967159fe4bfc51888ecb6ada1adfd8f922eb5442de9c8a63f8cfc
SHA512

bf702745c6d080475354ee160a7f0f41dd5f7ae722e983b67253ae0ab6159decf19d0b3c76cb56a7c21f97addb7eac73b7a9170cc4b89987349e127bf67f5737
SSDEEP

1536:z7UEYHIjD9IF9kioD7H0rbSHfWqiUM0N/e2XRlZ7I33333fL:lYojD2wioD7HgeHePozBOL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ca45770ee9332952d81336c40cb6750_JaffaCakes118

Files

3ca45770ee9332952d81336c40cb6750_JaffaCakes118
.exe windows:4 windows x86 arch:x86

879887518fe0d0bd50257da02c47c173

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess

msvbvm60

MethCallEngine
ord516
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
Zombie_AddRef
ord100

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 980B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ