b3d3f53ae788961d52fa4436b0cd1df4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b3d3f53ae788961d52fa4436b0cd1df4_JaffaCakes118
Size

72KB
MD5

b3d3f53ae788961d52fa4436b0cd1df4
SHA1

2f74e931ca07dc3f3bd2cb03920907d7422473e1
SHA256

a13a532db55a493a440d4d5e9aa7337c04ead46192837f2062adecb4c8bc6d09
SHA512

d9efa7481fea934104e6bb534db217e00a5a9839e74e2126c9d8cdf2cbd90b87a2592d1ca6fed157302ed8078ffad62700a433d3fc1466d39f730e5fc46a499d
SSDEEP

768:mIB6O/G19BrLy6QiV/fePlzVRorawSMJgQWc9pzbdxtMdm5S9QmK:mIB6O/G19BvrHklJYHSM97XdxtMQT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b3d3f53ae788961d52fa4436b0cd1df4_JaffaCakes118

Files

b3d3f53ae788961d52fa4436b0cd1df4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0345752e7197eef886418f172fa2cc5d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord595
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
ord670
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord606
ord713
ord607
ord608
ord717
ProcCallEngine
ord644
ord645
ord570
ord573
ord685
ord100
ord616
ord617
ord618
ord650

Sections

.text
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ