3d8ac6c2252c406b837f4c6232b12d03_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d8ac6c2252c406b837f4c6232b12d03_JaffaCakes118
Size

856KB
MD5

3d8ac6c2252c406b837f4c6232b12d03
SHA1

ee3f284fe8def55b62f35f920717213e0864ca1c
SHA256

c977bea560b12ebfb9222303da242581c09bd95b900ac5ab91fee52f1de3559b
SHA512

7d0428ed379b532a3a03d41715340aa1a5ab4fa023e89a154a19e77e5b1fef62c0f566a59b6905555f58af869c7862b07615850b80401f40c0ba93b9bde61767
SSDEEP

3072:Oa61O1Q1RGfjE0oHH1BIbNFUJq70OiJn:OrHJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d8ac6c2252c406b837f4c6232b12d03_JaffaCakes118

Files

3d8ac6c2252c406b837f4c6232b12d03_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ec0d65f21e1cecaca83cfe02d6b84318

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord628
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord644
ord100

Sections

.text
Size: 848KB - Virtual size: 844KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ