3e65a21bdb151c662beebda563a40bdc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e65a21bdb151c662beebda563a40bdc_JaffaCakes118
Size

272KB
MD5

3e65a21bdb151c662beebda563a40bdc
SHA1

5f382416cde8ade601003206dab7237ed05ed037
SHA256

b6c962c02dcb6ee71cf16237d560a7c3d296ef8c8ae088e2b0835e23f6c3c34a
SHA512

a19ab94574ba0022c6e061cd5147928336d85fe72ed6cc58b7d20c2579dc876607f08bf5d67a0df301b5d48fa8c8f64fbc135c457e18ce83f51434853a6fa491
SSDEEP

6144:dgeD0tD3xGSEOaNLcvWerqI94m2qdmzTm:dgPt3xGSEOaNLcv3r9B2qYvm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e65a21bdb151c662beebda563a40bdc_JaffaCakes118

Files

3e65a21bdb151c662beebda563a40bdc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3e356fa3be87bef1b2c8fdb0645bcb9e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord598
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
ord563
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord608
ord717
ProcCallEngine
ord644
ord681
ord100

Sections

.text
Size: 152KB - Virtual size: 151KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ