3dc1c7216631123959992a37cfae1f41_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3dc1c7216631123959992a37cfae1f41_JaffaCakes118
Size

39KB
MD5

3dc1c7216631123959992a37cfae1f41
SHA1

1be26c801376be040f31fa053a4e582844d20fa7
SHA256

6a9c25772321879caf30975166d12d6ae07cfca022cd68c92a17c70c794cc8fd
SHA512

12474eecd383fdd1f78ae6f9a008b09e35638d04c64a022ff9447f80b8b6f140286dd7aa48ed09ba3fc04b2cba996cbdae147035e2ef6c19357c527b3c82ed8c
SSDEEP

384:Kax+2I2kPY9CJf0NzuByFGr46EP4/FyRXvr0bHDp57TI5WS/LJpPc:KOI2n9IMBA4Gc66TgTDI70

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3dc1c7216631123959992a37cfae1f41_JaffaCakes118

Files

3dc1c7216631123959992a37cfae1f41_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d099cba68a440013593f432872186c8f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord666
ord598
ord520
ord525
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord717
ProcCallEngine
ord644
ord645
ord576
ord100
ord616
ord617
ord618
ord619
ord581

Sections

.text
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ