3cd4a8ca3874112b97a84e165b7ff6c7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3cd4a8ca3874112b97a84e165b7ff6c7_JaffaCakes118
Size

368KB
MD5

3cd4a8ca3874112b97a84e165b7ff6c7
SHA1

43fe011615a7ae9b3ad5dca0d52ebb363ca74c3c
SHA256

a80b3c13800ac6e5a9d77b7804732ac230d754670d0b3a209f1655f2e48ef4b9
SHA512

b7c166a5616c1f2d327533fd7590311bd22c3a59b60e2adc7b1aa98325b2de7c7f8698fec560d3b31a654c97abd2d403fc50f301d19af4b5749e7e7851fc28b9
SSDEEP

3072:Vdonrvp4FEkGEOtvzgz1KAC1F/wzx2LvcThVeU9PUp8XSR:Y7cPUL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3cd4a8ca3874112b97a84e165b7ff6c7_JaffaCakes118

Files

3cd4a8ca3874112b97a84e165b7ff6c7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

afead4b7b3c7592e5a2c39a9584bb294

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord626
ord628
ord666
ord595
ord520
ord631
ord526
EVENT_SINK_AddRef
ord528
ord562
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord608
ord717
ProcCallEngine
ord644
ord537
ord572
ord100
ord617
ord581

Sections

.text
Size: 356KB - Virtual size: 354KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ