3c9abb5be806f04637049af5315570e9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3c9abb5be806f04637049af5315570e9_JaffaCakes118
Size

252KB
MD5

3c9abb5be806f04637049af5315570e9
SHA1

108f82c933800691590c10500e1af6ea978e5aba
SHA256

a3f40917b9617e68def1bdaf396ae30f4815bd22c2d738758d2f2de4a520467a
SHA512

4d9044d60a8c8579f4e573c8e69a8103b20de15c9e2627003c6c9f481ff0c28838e465d02bbe4c2475086049fa094ce0c9d05fc663df06ae24e2b13e8b0ad404
SSDEEP

1536:bM3KX7Z95fZGBeHyAzOZnwWQa+/AK1FN1Gt5GxF4/yUuogwFeoZlk+FHIAZl:bM3KL5fZK67zOcmupwgoMYoAZl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c9abb5be806f04637049af5315570e9_JaffaCakes118

Files

3c9abb5be806f04637049af5315570e9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e238a929f3ec55f09a562c54d1f257c7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlMoveMemory

msvbvm60

MethCallEngine
ord516
ord631
EVENT_SINK_AddRef
ord527
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ProcCallEngine
ord537
ord644
ord572
ord100
ord616
ord618
ord581

Sections

.text
Size: 244KB - Virtual size: 242KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ