a3d0d1234c88de089f716eb3160e4b8c_JaffaCakes118 | Triage

Sharing

General

Target

a3d0d1234c88de089f716eb3160e4b8c_JaffaCakes118
Size

24KB
MD5

a3d0d1234c88de089f716eb3160e4b8c
SHA1

8abb63ea8550e2d22e6802ee520753f7d55708c6
SHA256

0ad6087588ebcc203c1af753449e018d2c8c0e638d29637606350175c1afdfd0
SHA512

ae8fd440a9d16ff0a6c14c3cef33da00d51bf728af8fbcdf2276e9c2cd3d7d10a836a389e186dbf9ce5ee81bf123fcfe730a91b3921750df4cdfe569408ceedd
SSDEEP

192:UDtt+ELGsDi8DHbpI3RZLt9FgEmaNjZoW3DwraB/9K:UDttDD74mVaNj2W3Dwre/9K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a3d0d1234c88de089f716eb3160e4b8c_JaffaCakes118

Files

a3d0d1234c88de089f716eb3160e4b8c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

91e6d8b6805303b55c3f698117c06f00

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord516
ord709
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord717
ProcCallEngine
ord644
ord100
ord689
ord610
ord617

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ