3fc6159bf81c9208ccbb50643c4eac8f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3fc6159bf81c9208ccbb50643c4eac8f_JaffaCakes118
Size

176KB
MD5

3fc6159bf81c9208ccbb50643c4eac8f
SHA1

fa31cd360748783181230b0a80b28be6534410cd
SHA256

5bcdd6e733f9e04ddc23bac37d7eee9026aaf540ef6d51f238ec95128cf1506b
SHA512

af2fd20fb86ff1ba1d55bdd3b600ac3bc5d96ded2bdaae99c2021413ba6a512784d156d2fbf5d463ae2f46c9beaa1b9062d0b54a37bf2054d555e9699ad1484c
SSDEEP

1536:JuZFkJCVi9NMXYg/ASmSsmJJXL/t7vpjJaM2HbJUlNKDeWWKnpj4YQa2odbdt/VJ:AQ6ASmSJtednpjP24TzYob

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3fc6159bf81c9208ccbb50643c4eac8f_JaffaCakes118

Files

3fc6159bf81c9208ccbb50643c4eac8f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

037d5d295d3e72f43cbd5f9051183adc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
ord696
MethCallEngine
ord518
ord593
ord594
ord598
ord520
ord631
EVENT_SINK_AddRef
ord528
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord608
ord717
ProcCallEngine
ord644
ord645
ord570
ord100
ord431
ord616
ord617

Sections

.text
Size: 164KB - Virtual size: 163KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ