3d46ae08e398f5b1d5d951ecfe553ea9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d46ae08e398f5b1d5d951ecfe553ea9_JaffaCakes118
Size

2.4MB
MD5

3d46ae08e398f5b1d5d951ecfe553ea9
SHA1

207a931ea5a7d676edf5535f31e44492ae932f71
SHA256

fc1e07f6a3e47ec249fc069cb02e0294b1af0e20452f2769da6987448a7c37b8
SHA512

2e23264ca22e3e56dd1e013c7b9075f51ee21891c1c0235e6ad85065ac9bdb99f0afd51631a3db89e83e0ff1fa6db073f610ee30755a4a8660f5b8d6baa976a0
SSDEEP

49152:DHXaRHN3ITj8+J107OlATfVk+3Zk1f/yOLcGVsy/47N1l1a/kKigzKD:joN3ITww5l4H3cH5so4D1acKigzK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d46ae08e398f5b1d5d951ecfe553ea9_JaffaCakes118

Files

3d46ae08e398f5b1d5d951ecfe553ea9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a8b2967785519e59c24c7ed6c16362ca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

expsrv

DllFunctionCall

msvbvm60

ord698
MethCallEngine
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord717
ProcCallEngine
ord644
ord100
BASIC_CLASS_AddRef

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ