3aa01a9df1a520935cec8b29dba0a967_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3aa01a9df1a520935cec8b29dba0a967_JaffaCakes118
Size

136KB
MD5

3aa01a9df1a520935cec8b29dba0a967
SHA1

c9fa363ba2b6d6e4779929edd5af3809d65c2d86
SHA256

6cc780df0cc47936348874fcd5d6464b6f72cf3a55117d5b7dc5fc3f1bb9b58a
SHA512

1e3984dfa823a385abe3dc8b11e1f60fe9d5decc7b024c9d3e9ecd6aef8fda8ec37dc3adf8a8f8837c82f2062c8bd22700f7c12137baee5832bbfed68fcc100c
SSDEEP

1536:KMtM+ntFCWOfKrpPfxzi1k80Li0CckQEHlgjki6g4Kv8RTzsLgBScE:JnTZgk8bckQEyMs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3aa01a9df1a520935cec8b29dba0a967_JaffaCakes118

Files

3aa01a9df1a520935cec8b29dba0a967_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ea659fdd9acea2745b8192aa6d23dbe5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord582
ord583
ord584
ord516
ord660
ord593
ord594
ord520
ord632
EVENT_SINK_AddRef
ord561
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord535
ord644
Zombie_AddRef
ord573
ord681
ord575
ord100
ord546
ord581

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ