b3f140e7a9f5c29f7854c2dc2b17aeac_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b3f140e7a9f5c29f7854c2dc2b17aeac_JaffaCakes118
Size

56KB
MD5

b3f140e7a9f5c29f7854c2dc2b17aeac
SHA1

95455326e9d8fcc8abfe3545ad62ee242e5921b1
SHA256

78b5e506015b28aa26ca1d248a7a8684fde8e8a783b5dc7f3eafbd602a7b7656
SHA512

64a1f724322fa27a3a7d1d0f36c6916f325534012d258a2c0e01c117dfc117f13472c7ec5d4ae363505cbc31a071d66d17e62cea4ca4666586eb6be1f7c2376d
SSDEEP

768:KUTTzbqd91dfp0T+qidyHHaVF62Nl2uhndXg+5WD:ZTWdXBpO+FS6V42Tlh5+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b3f140e7a9f5c29f7854c2dc2b17aeac_JaffaCakes118

Files

b3f140e7a9f5c29f7854c2dc2b17aeac_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6dee0fc6fac85edca2133d6d7335b40c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord593
ord594
ord598
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord717
ProcCallEngine
ord537
ord644
ord570
ord685
ord100
ord616
ord617
ord581

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dem
Size: 32KB - Virtual size: 4KB