d3cfb85e18b152dbf0cff782880e3fc1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d3cfb85e18b152dbf0cff782880e3fc1_JaffaCakes118
Size

135KB
MD5

d3cfb85e18b152dbf0cff782880e3fc1
SHA1

6ed907215cfc20a114f898ee111839b3da2661ad
SHA256

7d64d458af328d61a411da787ef1a9323299933f141195c56dd1d979de98c9d2
SHA512

c295df3a895b91683270d62e8bfaffebccfc13e27ccc08e81cfd69b58a8415711449c741f5452a9761341e9392fe7076db4373bf7d415f74a75f5288ef422543
SSDEEP

3072:6VjpVI2nsBAEcmWOSWvIVLozHVYuhf83R4O/ue:OXoSue

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3cfb85e18b152dbf0cff782880e3fc1_JaffaCakes118

Files

d3cfb85e18b152dbf0cff782880e3fc1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e67757e31b92f20555578c0ccf3464d9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryW

msvbvm60

ord696
ord516
ord519
ord666
ord667
ord593
ord594
ord595
ord598
ord709
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord531
ord716
ord717
ProcCallEngine
ord535
ord644
ord681
ord576
ord685
ord100
ord616
ord618
ord580

Sections

.text
Size: 84KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 19KB - Virtual size: 20KB