3bff3b9a70e4a334b78155692de3786b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3bff3b9a70e4a334b78155692de3786b_JaffaCakes118
Size

52KB
MD5

3bff3b9a70e4a334b78155692de3786b
SHA1

95c0ea9517c103eda8f480233f625171deaf530a
SHA256

fa928dcb13f7a69692112e793e36c7c642935994246104fb3de6b90b1da69417
SHA512

be074dcb7fc900656439b4bf9cd6a0e2f79f533a781afb61646dd0fb0d7a828696e05769ed64ead6d56418bbeef2a7a67620addaa577d0fdcf0ac65356fcd73a
SSDEEP

768:cfq3mt2q6k+DQB2YsNJR9vgXaSupX2RplOqKmQVPx:yqWtF6k+D5FJ9vgqSeRmQVJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3bff3b9a70e4a334b78155692de3786b_JaffaCakes118

Files

3bff3b9a70e4a334b78155692de3786b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0182f61831acfb2e77a789554a33738d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord666
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord530
ProcCallEngine
ord536
ord537
ord570
ord100
ord616

Sections

.text
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ