3dd64ac79ecfac1f34e0a80889fe7a42_JaffaCakes118 | Triage

Sharing

General

Target

3dd64ac79ecfac1f34e0a80889fe7a42_JaffaCakes118
Size

24KB
MD5

3dd64ac79ecfac1f34e0a80889fe7a42
SHA1

1f3f830ae33b09582449db5dc5ed3bdd0dabc364
SHA256

a5d0cdca539b4d955dfe58951ade0813abbabca2a589b835e82ba2af8beb37a3
SHA512

9dff3f35d1ef8f78643b8c30197a6e00c9f63db4977a6a91fec3f8bc6dc5b4ed034c2e252361305399814e33ad7e76c37891f6f3485a5e9d5eba67d86534a994
SSDEEP

192:Ri33IJIAIU4XcvzRJ3qrSVU6qPyy2RxOPi33IJIAI:Ri34JIAJqqz8GqP0OPi34JIA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3dd64ac79ecfac1f34e0a80889fe7a42_JaffaCakes118

Files

3dd64ac79ecfac1f34e0a80889fe7a42_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f6cf85f301efb6d0bbd020ec9910c0cb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord595
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord100
ord581

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ