3def05cb018fd1a28121161623e0136c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3def05cb018fd1a28121161623e0136c_JaffaCakes118
Size

188KB
MD5

3def05cb018fd1a28121161623e0136c
SHA1

6c97c287495256114f63222a4d419ef770468b88
SHA256

41114196eb9e62a2640af3fb35fcf94fba5cb8c45552dfa6577279425dc64189
SHA512

d0a8bd32574dbca49296f67b92697ecbe8bf42da52b714a07b80c35524ace313c9779954372923e90ee6a1637e178fa22e5f5df3855ee84beb7b03705e8d8d7f
SSDEEP

3072:jSFCbhD0iCld+AHier5D+sr0AXkFNUqxU+1fZ1rmgsCfv8AYjM:ukbhD0ldXHD5zAA0FNNxP1fLr3sC38AJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3def05cb018fd1a28121161623e0136c_JaffaCakes118

Files

3def05cb018fd1a28121161623e0136c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1701715f8a237c267cd6a87f46e7ff4c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess

msvbvm60

MethCallEngine
ord516
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
Zombie_AddRef
ord100

Sections

.text
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 140KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ