3d86a9b1dfc1cb14261d6942b4d0c591_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d86a9b1dfc1cb14261d6942b4d0c591_JaffaCakes118
Size

20KB
MD5

3d86a9b1dfc1cb14261d6942b4d0c591
SHA1

72a49bec9b30dcab7e70983c84888f208ddd9df5
SHA256

b2df7799f5ac4fd70af09bae3c80da9b08f5250c5bbb3f7d4e35fd4df08b8701
SHA512

d84d44a979ae2a55e4f2b59663548d1c22375cd967aff05f63530875aa64f46e775525038c14b98a79499e5c5c04f24e4c6d0477a6c6af69fc8929445b5313e1
SSDEEP

192:j9/nchhrKPURZLWgR6odplasvc3ZhAhIAU8dMdWLOaxmzzbfGM:j5ncyP4ZLWgRllas0JC79pRxm3TGM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d86a9b1dfc1cb14261d6942b4d0c591_JaffaCakes118

Files

3d86a9b1dfc1cb14261d6942b4d0c591_JaffaCakes118
.exe windows:4 windows x86 arch:x86

29a1865ca39c8b419c64c325c3c66c8c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord665
ord666
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord607
ord717
ProcCallEngine
ord644
ord570
ord100
ord581

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ