3df5a3ded590ad9cf040125ec84dac43_JaffaCakes118 | Triage

Sharing

General

Target

3df5a3ded590ad9cf040125ec84dac43_JaffaCakes118
Size

76KB
MD5

3df5a3ded590ad9cf040125ec84dac43
SHA1

6a9caf283a5c0109018333250ab6d937a3012ac9
SHA256

a15545627b2c59118d6e8566abb9e9473039ae0e57f807d6ccaf706a7f027ec6
SHA512

23ca27afa7ac34db6dae69c6ed617b9ac62f84148fec45548673cc52427c1f585bbb1b2d2cb9fd80c6d36f98cfa99893bac2fb30a57b08267decfa5ce6db83b3
SSDEEP

768:jHzDcSmR25QinzxPCAex+L20h01k2BlKvzdP928E/h2I1CdwxpiN:TzD/puinNPCrgJWMeQh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3df5a3ded590ad9cf040125ec84dac43_JaffaCakes118

Files

3df5a3ded590ad9cf040125ec84dac43_JaffaCakes118
.exe windows:4 windows x86 arch:x86

763450bd2297663cd281ebe8782a93a9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventA
WaitForMultipleObjects
WaitForSingleObject
SetEvent

advapi32

SetServiceStatus
RegisterServiceCtrlHandlerA
StartServiceCtrlDispatcherA

msvbvm60

ord696
ord698
MethCallEngine
ord517
ord518
ord626
ord666
ord595
ord303
ord598
ord522
ord309
ord631
ord709
ord524
ord525
ord632
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
ord670
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord531
ord717
ProcCallEngine
ord644
ord537
ord538
ord645
ord539
ord647
ord648
ord573
ord576
ord685
ord100
ord610
ord616
ord617
ord618
ord548

Sections

.text
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ