3cabc6a8dc5e1efd7a8acdfb3eef2a34_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3cabc6a8dc5e1efd7a8acdfb3eef2a34_JaffaCakes118
Size

160KB
MD5

3cabc6a8dc5e1efd7a8acdfb3eef2a34
SHA1

313a9389bb6c2e0431fd6f5e2bfa20fd99efe50a
SHA256

eebee922070fd34646b105d8a747d8083789215d5b511ecb81d409ba0c278a98
SHA512

22805b60836007bee333e04132200ee28663ffb0ed75b2c69993b4bd4f3991d1d6e493606b84ee836b6af32ff17fb43f14ab4d6e481585616e92a0f856b3d266
SSDEEP

3072:sW3LB7qkMS7R7FRbPQhpwlofhEFO+WOuSRxSqeVKGwVrYeNi2U84rQe+7m5k0Wv2:TVqAt7PbTbO+ncqWKGwVr5iam5r02

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3cabc6a8dc5e1efd7a8acdfb3eef2a34_JaffaCakes118

Files

3cabc6a8dc5e1efd7a8acdfb3eef2a34_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1bfd2907ffa591a6a1d8b0824872352e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeResource
LoadResource
SizeofResource
LockResource
FindResourceA

msvbvm60

MethCallEngine
ord516
ord666
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ord716
ord717
ord537
ord644
ord645
ord648
ord573
ord681
ord100
ord619

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 116KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ