a3decff876e860dc38fae780ac9b54c3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a3decff876e860dc38fae780ac9b54c3_JaffaCakes118
Size

16KB
MD5

a3decff876e860dc38fae780ac9b54c3
SHA1

2eb3cc9f68af14dc7a7843e6d2c1224e443913da
SHA256

5c135958631fd02629791dcb3411d683c5621357c11d7c1038cab528975c4c09
SHA512

b031d1774f69789574ae23bb7ff18c2cb5983fb6f66c21091e1f1c50a53e84c86c42273223db603e8d6ec328ac706776798242706ad5ef9848357350c4995409
SSDEEP

192:Z+ekDr4x37Nn8NJSV3p1fSOryqy0t3/Ag6feSV3p1fS:lkDM3S0FLfSOryXzXFLfS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a3decff876e860dc38fae780ac9b54c3_JaffaCakes118

Files

a3decff876e860dc38fae780ac9b54c3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

61b8d064f3ebc7b1adb5cc92a46e36b7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord517
ord598
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord100
ord616
ord618

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ