3f843af351b5f6172f28c3b8500d9470_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3f843af351b5f6172f28c3b8500d9470_JaffaCakes118
Size

3.4MB
MD5

3f843af351b5f6172f28c3b8500d9470
SHA1

1cf49ac4df48093ae610c8d85c1300fa15f17904
SHA256

bb27402d59a89d6fb12e54811a912b25e6db2a55055a5264756feaf08d39ee30
SHA512

a14c1db3744397b02ca60082909d4628bb587ead134bd387dbce610dd713e408ce4917db5f4b0e5dad873c5bd0f9d251e94efddcfcc047055b4fa32e0eaa5d43
SSDEEP

98304:7RCnm+PFT6TIrPwxVubpi9OqkOA98pWeQz:7K1FT2IDwxVu9QSOHA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f843af351b5f6172f28c3b8500d9470_JaffaCakes118

Files

3f843af351b5f6172f28c3b8500d9470_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c1966b0756465dbe9829e1efca51bba7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord621
ord516
ord595
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord100
ord616

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ