3dc627c25bcda1a7821df62b2cf2ac36_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3dc627c25bcda1a7821df62b2cf2ac36_JaffaCakes118
Size

300KB
MD5

3dc627c25bcda1a7821df62b2cf2ac36
SHA1

5ed37bdf54a160c1321c990775003bcf31641bd1
SHA256

bd0b7a48109b5e61a1848d4efb13619b232ce8e13f52c8e3bdc31819029f7589
SHA512

e4e3027ab21344133ae994c96b4da56f592f58da3437a30c588735c92ed267b5b75d75453307a5e54782ca2dac455f0b01142ad83fd82bc38807d97043df5914
SSDEEP

3072:YX0e1FB/DpKjCLHhgEBJxbwgZfY00lLtw4pEqz:abbZwHlL2i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3dc627c25bcda1a7821df62b2cf2ac36_JaffaCakes118

Files

3dc627c25bcda1a7821df62b2cf2ac36_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2e7e1bb046c4c6d3ca42779bf040aa77

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord626
ord628
ord666
ord631
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
ord562
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord717
ProcCallEngine
ord644
ord572
ord100
ord617

Sections

.text
Size: 244KB - Virtual size: 240KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ