3e8caf7b724cfd9700a64cd46353b0b2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e8caf7b724cfd9700a64cd46353b0b2_JaffaCakes118
Size

20KB
MD5

3e8caf7b724cfd9700a64cd46353b0b2
SHA1

44408346a5509559786b7c65f7d4b7ee46c71d4a
SHA256

539e003a11b9b716e86159c64859f13389303b31346d0903ce5fe1bda23938d1
SHA512

8f133ca7a7090f43f1b9e9f3def3df837c1a726bc4c3d1ed967f6f1dcf0975e810ce529bffb67016209719f051665521d09f51e5ea62b0e7888283e24b76b236
SSDEEP

192:wJqxJK2n6Ri54iDQ96hNSuy8fTNqZA7pa6S2+B+XYavyj:wJqOeS0DHHYZA7Y2I+mj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e8caf7b724cfd9700a64cd46353b0b2_JaffaCakes118

Files

3e8caf7b724cfd9700a64cd46353b0b2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b0083f28474b38a3dfab03b3b707bdb1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord631
ord632
ord526
EVENT_SINK_AddRef
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ord717
ProcCallEngine
ord537
ord644
ord573
ord681
ord100
ord613
ord619

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ