3daa5fb73a24d7643fa0e96ad142dc1b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3daa5fb73a24d7643fa0e96ad142dc1b_JaffaCakes118
Size

343KB
MD5

3daa5fb73a24d7643fa0e96ad142dc1b
SHA1

3c5b4e08e750b5875f05d1b074684e3b5144593f
SHA256

ea1775daee62c7ddf5731e728954ffcf10dbea0b4df6be1a46b47f23a314d7dc
SHA512

1ae8c8ea920f25adec98c26645e8c76259e1e5126e4448760b7d2a8752289a318bd687bca39942305c33f61df075d22d43f19572c352abcff6d64989a0106154
SSDEEP

6144:vHOLo9BKTaEqhguQVFWxVTBUNdCvdl8B545nJCSzZXvR0gw9VtNuw:vOoHAhqyuWUxVT8dcmX4vCS55wrtp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3daa5fb73a24d7643fa0e96ad142dc1b_JaffaCakes118

Files

3daa5fb73a24d7643fa0e96ad142dc1b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6fd6b9dab5cd17ff8f16fc0e5b4c1b92

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord631
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord713
ord717
ProcCallEngine
ord644
ord537
ord570
ord648
ord573
ord685
ord100
ord619
ord581

Sections

.text
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.CoLoSuz
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE