3c157a5a573caaf6781682380c956b04_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3c157a5a573caaf6781682380c956b04_JaffaCakes118
Size

20KB
MD5

3c157a5a573caaf6781682380c956b04
SHA1

08201b41300ccb1809b56641f776ed2a4e655691
SHA256

f73ab390f2896562017fe62241bc48b77edffb28926e92e31b35fbfcf4a0d77a
SHA512

be1c4b4b6fe5d918423f80f24dc8076271c984d6b466eef0def81162ef43b63ccbf4e0fbf17c831a3e309581a4115e2ed9f0ccd4c9b10db95231f2fd6a7dbcf6
SSDEEP

384:xaiHu5BWoFf25Gr66wiDulzqRIGKrqiv32BRM:s+yZf2+mlzqCqYo2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c157a5a573caaf6781682380c956b04_JaffaCakes118

Files

3c157a5a573caaf6781682380c956b04_JaffaCakes118
.exe windows:4 windows x86 arch:x86

af873b5901bc0acb09f0d784b362e3fb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord518
ord626
ord558
ord666
ord669
ord593
ord594
ord598
ord520
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord714
ord607
ord608
ord717
ProcCallEngine
ord535
ord537
ord645
ord576
ord685
ord100
ord616
ord617

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ