d3e88be9bd55fdfcfca3af86ae9b5b14_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d3e88be9bd55fdfcfca3af86ae9b5b14_JaffaCakes118
Size

108KB
MD5

d3e88be9bd55fdfcfca3af86ae9b5b14
SHA1

d02c50c012952534649de923461bb110e093eaaa
SHA256

a106b99ffead8e446089687078ac0b5a53b5944404daf75705aad5e7075fd600
SHA512

65efb182c9c10df89738f26e723ff0fc43875a9daf11a4cb51d5512c47740136b12c844f232d49da9cf2aca64223ec83bead8fd85f43a4d49ebbdb8e7108054f
SSDEEP

3072:jV7wZnIpdLvcyLQNdORFz/ohRPAkvIDXA25vW06:jVRN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3e88be9bd55fdfcfca3af86ae9b5b14_JaffaCakes118

Files

d3e88be9bd55fdfcfca3af86ae9b5b14_JaffaCakes118
.exe windows:4 windows x86 arch:x86

eb376311604b61fddd5b310b77c45afd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord666
ord595
ord598
ord632
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord607
ord608
ord717
ProcCallEngine
ord644
ord537
ord681
ord100
ord617

Sections

.text
Size: 100KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ