8a3bcc7e603117a2c3f146538bce1844_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8a3bcc7e603117a2c3f146538bce1844_JaffaCakes118
Size

616KB
MD5

8a3bcc7e603117a2c3f146538bce1844
SHA1

7642345a840f5f4c38162a12e579d432b8f1c7a8
SHA256

45a1030ef70bd3233df7afb66c0834f87052ff060bed182a6a147163f5ba2308
SHA512

2db90de8d1ab99cb2e3b17a29492a9b871391ff928e345e1f070823449d402b38f1587560133c8fdf6412cd520c9c9c6f8d0da2e4e40d847fd51c4eaf756c0a7
SSDEEP

3072:CmZh6oqfLHF+OGZtZX272Fk2BxVgehU5TWmOv8du8IJ1HptE7bLIc67dyOvihSLa:k591

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8a3bcc7e603117a2c3f146538bce1844_JaffaCakes118

Files

8a3bcc7e603117a2c3f146538bce1844_JaffaCakes118
.exe windows:4 windows x86 arch:x86

16f98d6af7ad7c596a2f942ae6e6f04e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord665
ord631
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord644
ord537
ord100

Sections

.text
Size: 608KB - Virtual size: 606KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ