d3d4da0e9bd2932172f7d8b6c762a57f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d3d4da0e9bd2932172f7d8b6c762a57f_JaffaCakes118
Size

20KB
MD5

d3d4da0e9bd2932172f7d8b6c762a57f
SHA1

a30e680e5b06119dca527f56fa8dcd9ab3d9cfa3
SHA256

317b271f8377e2ea53513d92ef261f1c619e9f58a31ff03d0812dcca338835ea
SHA512

40b9afe41bc3a086c107a6d5f2bbffda35b380d33b07bf2ceaad55782e57075fa513306e3ef1119a3fab306bd4a43264f06783070a0205a1c8808db9d0a05015
SSDEEP

96:lt1bEke3ZRYItCPvIXAIJR41oEtDDOLX4mvLR8r7Moo577fEDNHX5AUnKTN4Mn:718RhtgZSZqr7IEBX5A0KTN4M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3d4da0e9bd2932172f7d8b6c762a57f_JaffaCakes118

Files

d3d4da0e9bd2932172f7d8b6c762a57f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a1b9b4538f33d0bf3214667d2768b383

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord593
ord594
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord100
ord689
ord617
ord619

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ