3cca195653e152d94585bc9506b712d0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3cca195653e152d94585bc9506b712d0_JaffaCakes118
Size

72KB
MD5

3cca195653e152d94585bc9506b712d0
SHA1

cf0579ed4893d8b644c55d260ac2a05befaebc79
SHA256

f4ba94a175444d2854da6ba9f458012ba16433899e63eecce3f9a39933b9f702
SHA512

fe6777c8a47e8148b021f50e38b359dfaf374ba96ee0b9f552f77904940fe62017596550ef56db41061fbfb3ca06f901bbad1245e7855eb5ea34ace31ef30277
SSDEEP

1536:cpxI7jITsodf1zQ70iEQgcJf0mAcl5y+d5BZ2:cjI7Puf1yry+d5n2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3cca195653e152d94585bc9506b712d0_JaffaCakes118

Files

3cca195653e152d94585bc9506b712d0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5ea805d89d52101bedbe66d6f1359069

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord666
ord598
ord631
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord570
ord648
ord100

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ