3d916cf055cc7598bd1becc7b038ccc2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d916cf055cc7598bd1becc7b038ccc2_JaffaCakes118
Size

400KB
MD5

3d916cf055cc7598bd1becc7b038ccc2
SHA1

2eac778f3b262265ff1051e867c3c006b81a3f11
SHA256

a1880e75f5f641a62c79865f7f4467d3ee78023b258b8d54c75e6e03299843da
SHA512

7a4a2a149079eb6d64a7865abc5cc871560d5bbcec35aee0918c230a949e107471903f728fedcb24928b0e991d703efa86331ac5261fe26b22b1fd4c0bd9273d
SSDEEP

6144:MgN5pxaEAvA5WF7WU80WkI1Z/vz3TCpN7rt4CWpcNT7pARumo29HXT6:ffaEefWUpWkI/vXClWpcNfpyuKt6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d916cf055cc7598bd1becc7b038ccc2_JaffaCakes118

Files

3d916cf055cc7598bd1becc7b038ccc2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cc57117eee6a9dcf9a0d8955001ca903

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

��

ord516
ord593
ord598
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord713
ord607
ord608
ord717
ProcCallEngine
ord644
ord570
ord681
ord100
ord616

Sections

.text
Size: 88KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 308KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ