03ff4e5be8a3545ff26cfd4e9ead234a_JaffaCakes118 | Triage

Sharing

General

Target

03ff4e5be8a3545ff26cfd4e9ead234a_JaffaCakes118
Size

448KB
MD5

03ff4e5be8a3545ff26cfd4e9ead234a
SHA1

3b48583a1d4c957515e118bf82f08b525fadb24f
SHA256

9ea45e17e6cc604f0963aa68e74003bb5f71ac1e1d77298a09763a4b7c309c1e
SHA512

43f3628ccd8b27e93dae6fc4f6eefbd934c63057dfd046a540d04947dfb3131fcf5b87e040b01330c383c38ba6c9a3d8b290bd5952c33d0458447ab483eb6318
SSDEEP

3072:tX0e1FB/DpKjCLHAmwCwI5uwI5afF+Cf3Vp/Hjb9T0F9cBU+enWAYNhxuBzd755V:7Bfb/HH9PBJkYbY5fwr1ag/ra/nixX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03ff4e5be8a3545ff26cfd4e9ead234a_JaffaCakes118

Files

03ff4e5be8a3545ff26cfd4e9ead234a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

262889fed7161dc428064854dcf90cf0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord628
EVENT_SINK_AddRef
DllFunctionCall
ord563
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord100

Sections

.text
Size: 432KB - Virtual size: 430KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ