3ca3a308ea438de37a014a82e5c2d6d6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ca3a308ea438de37a014a82e5c2d6d6_JaffaCakes118
Size

92KB
MD5

3ca3a308ea438de37a014a82e5c2d6d6
SHA1

858206006728b5b89a8f03419846154233934e8f
SHA256

bbe6527bb250060e2cf2979cf55534cc1c52cd1b091b102d732b0c612e01392b
SHA512

e8b6134cbccd4cdcbce41a93874035b6d37bd9c745050b4ad01e2bba9e651090848a6e9e87cb6a69f493c7fda13ba34b774463123d1c140704344d106d2f920f
SSDEEP

1536:d9sgJJdmj0bhJJAUPqKReVT26DTdJGGsSKiKEwM:jsgBmyhkUvRed2cTd0FFM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ca3a308ea438de37a014a82e5c2d6d6_JaffaCakes118

Files

3ca3a308ea438de37a014a82e5c2d6d6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9a57735aefbdd11a23987eeb50935f70

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord698
ord598
ord631
ord525
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ProcCallEngine
ord570
ord648
ord578
ord100
ord617

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ