3fd010550eb2fc6ef5b3ea83e8099428_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3fd010550eb2fc6ef5b3ea83e8099428_JaffaCakes118
Size

220KB
MD5

3fd010550eb2fc6ef5b3ea83e8099428
SHA1

a0d7c502cf08a2f91fe4a7de1292cad541f1cab8
SHA256

c2d50dd782de2f1140a43752a84821395e5fb70ad7453dee2d37ad7b4f1264c3
SHA512

da0144d49dfbc8a199b3de6150529fccea1ab9b2a8f9fbc96ccf75eaeef388c14af339a853244eb99b4612f7e60550e9a356b76ee5e32846cb631fd19f042f1c
SSDEEP

3072:EyDVmia+mWgC3n/0iIUX2ovuswyp8LzMwulp1:EaVmia+J5n/0iIuWxYlp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3fd010550eb2fc6ef5b3ea83e8099428_JaffaCakes118

Files

3fd010550eb2fc6ef5b3ea83e8099428_JaffaCakes118
.exe windows:4 windows x86 arch:x86

663c2a3fc93a96bd29b0225f428dc07a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlMoveMemory

msvbvm60

MethCallEngine
ord516
ord598
ord631
EVENT_SINK_AddRef
ord527
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ProcCallEngine
ord644
ord537
ord100
ord616

Sections

.text
Size: 76KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 140KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ