3d0cedfa8aac877978d874daefeedf72_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d0cedfa8aac877978d874daefeedf72_JaffaCakes118
Size

68KB
MD5

3d0cedfa8aac877978d874daefeedf72
SHA1

07927d496bb52a485d00d99631da1287a8a5f52a
SHA256

9ecc313efbfa4d5c1ee98c6a27f68c4491612887097ea256ac0cb16e5dbb361a
SHA512

7669aff749dda83e39e8e0552788306bbcdb8f01c8d7585f5706a44833ff4435d1102dc73f75fdb8244241f18c4032ce9b317976a43929bc8cfd93364cf2cbb7
SSDEEP

768:Hf+K0ZDWcbkhGc4qnWfS5aXgaMYQbMqOKq6rKkIkP:/EZDWcbBc4qnyZXfMYQbMqrq6rKkIkP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d0cedfa8aac877978d874daefeedf72_JaffaCakes118

Files

3d0cedfa8aac877978d874daefeedf72_JaffaCakes118
.exe windows:4 windows x86 arch:x86

51fb1a94ba10a88b203b9a38f8839c75

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord518
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord645
ord648
ord100
ord617

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ