bb3a8bdf367e78130e5f9e2d8970a070_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bb3a8bdf367e78130e5f9e2d8970a070_JaffaCakes118
Size

36KB
MD5

bb3a8bdf367e78130e5f9e2d8970a070
SHA1

a20f0649857037c6d07bcaae94ceafc6f3ed246b
SHA256

306f500e0c3cb3560f7cc372fe445373d51b1bab636da0688043f713f870edf8
SHA512

574bae1dd1a64f878eda574f1c7b5d7fae30aa322f7aa0f883c06e96821c42cf47e5292e1aee526bf4766441ef553e875c55d9d0a1f79862e19a01bc32e6a714
SSDEEP

768:QOiEhE3Cuv65MTbCsz6xLwDLpFKrYut4mS7vRA:jLySEnDNvO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb3a8bdf367e78130e5f9e2d8970a070_JaffaCakes118

Files

bb3a8bdf367e78130e5f9e2d8970a070_JaffaCakes118
.exe windows:4 windows x86 arch:x86

68af3d26b5c2bfa06a8d70f2dd1dee8e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord518
ord593
ord594
ord598
ord632
EVENT_SINK_AddRef
ord529
ord561
DllFunctionCall
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord645
ord571
ord685
ord100
ord616
ord617

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ