3d4f0d24a32f5a8c267fe0b14b983cf7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d4f0d24a32f5a8c267fe0b14b983cf7_JaffaCakes118
Size

644KB
MD5

3d4f0d24a32f5a8c267fe0b14b983cf7
SHA1

d7832361a1cc24cd8bf0275a711ec91e62b62845
SHA256

a8372effd4f1bdcdf75593cf39e1c391aaa65f6d9e5643eeab0a812c429760c4
SHA512

18f40a8987742f235625babacd61b9529140ee676be1005d89ae4da55d6f568298ef8a4769cda79ecaa7d24c5a43ab98e26d8a7802bd10a68bcd45963d260f98
SSDEEP

768:mxCTy4X1yXSbOX95HfDCl6Vs2GDujXlELIXRaMhnQ91bE+adIYhnuwoJu1IzAW6H:mF95G6lQ91bUFhucS8/U+smP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d4f0d24a32f5a8c267fe0b14b983cf7_JaffaCakes118

Files

3d4f0d24a32f5a8c267fe0b14b983cf7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2c20cc1d1143cf920da0b76bd87c7b3e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord628
ord665
ord520
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord716
ProcCallEngine
ord644
ord576
ord100
ord616
ord617
ord619

Sections

.text
Size: 636KB - Virtual size: 634KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ