3dd820fcd97c194296c844adc1ac74f0_JaffaCakes118 | Triage

Sharing

General

Target

3dd820fcd97c194296c844adc1ac74f0_JaffaCakes118
Size

31KB
MD5

3dd820fcd97c194296c844adc1ac74f0
SHA1

059d7a13852862f6145786b9470f794a20dfe71e
SHA256

096a9a23d6c2b8fe55ce425d1527510d97ca7473275c09bee75b7bef862a8a62
SHA512

5960d8962bca14db0433b2ca5601bc1a993f7af1e9097b8f89aee6de2aa7f6b1e42f8928e044a325e6e0ad4160ab53e5be09a48b9857eeb3ad51d9664c85d2e0
SSDEEP

768:abjy4RxluR5nttMr0g21CNA5Pw7tor4klR:cu4puR5nttMr0L1CNgPw7vkb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3dd820fcd97c194296c844adc1ac74f0_JaffaCakes118

Files

3dd820fcd97c194296c844adc1ac74f0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

85136c9834d453dc6aa3a0f5d46b21f2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord183
MethCallEngine
ord663
ord669
EVENT_SINK_AddRef
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord100
ord432
ord541

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 552B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ