3c862c4b15a28fb7922e56b9335636ed_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3c862c4b15a28fb7922e56b9335636ed_JaffaCakes118
Size

168KB
MD5

3c862c4b15a28fb7922e56b9335636ed
SHA1

fbcbc5e1d337321d5ce38c230c9f47b9b811ff43
SHA256

12c7fa2fb4977b1f00197bde197fe299998969a25b2a5f7d7e7b92382f3b1ddd
SHA512

df0b4fc70f94bdfad197530990b432dc45d9deda988e4576be0b4f5e90ee283052b55193ae6a9bc6c8062e9770302dc60598246ae6f3407af5ea5069e49b0ed6
SSDEEP

3072:6XS3wSqryj/HXMIP/S7Ek4nOdAvJsl9J7o7NorKYzf:6/w/HX5/Xk4Ouhi9J7KMTzf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c862c4b15a28fb7922e56b9335636ed_JaffaCakes118

Files

3c862c4b15a28fb7922e56b9335636ed_JaffaCakes118
.exe windows:4 windows x86 arch:x86

23013699b43b4d08e9fe4927a36a23a9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord595
ord598
ord631
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord717
ProcCallEngine
ord644
ord537
ord573
ord578
ord100
ord619
ord581

Sections

.text
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 100KB - Virtual size: 4KB