3e1e0639f78507d48dd5867adb274add_JaffaCakes118 | Triage

Sharing

General

Target

3e1e0639f78507d48dd5867adb274add_JaffaCakes118
Size

60KB
MD5

3e1e0639f78507d48dd5867adb274add
SHA1

4ca673ab69cd1cec9520a8d6dd6d9c40b90d912e
SHA256

72210a2a4946c0a22b890aa914015cd8d31fa638a8cc6dc1d5a697c645e569b1
SHA512

45c0a72745451a4e7397ed526fe22e36575fafe7b954f1d9d2946f87e15acfb2bcc003d88280f2c04f8f7986ec1f6126234ebc9cfa1b5a81fbbd0e7a7768b6c1
SSDEEP

768:yXPn3CSDEk/8TMGZ9gvPcZ9gvUZ9gvw/VF:yXvyMUAGZGvPcZGvUZGvcF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e1e0639f78507d48dd5867adb274add_JaffaCakes118

Files

3e1e0639f78507d48dd5867adb274add_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a295fd534ca47ca63cc1d5dc995ee307

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord621
ord516
ord666
ord595
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord100

Sections

.
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ