3eb1bb0f1b04071a0df86f7aec71887a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3eb1bb0f1b04071a0df86f7aec71887a_JaffaCakes118
Size

844KB
MD5

3eb1bb0f1b04071a0df86f7aec71887a
SHA1

a188d0b63b9cbcae326036839725deb55aabb60a
SHA256

b9b0af54682f64f84785f65063ef92abeb1c6cdb91834246daef493373bb5ce5
SHA512

34f02d0d94fc0b76e2c35ed71d05be62d333735a7b4f76362ad0078e6d6e51d148aac3e878f8c47806f809579e5c40c0c92a66694fcbcac61102d4d1d6fe4555
SSDEEP

24576:wPfMpM+b4lysm2iIFWHCnsHV1iQXudIv6IsJ3kwo9VZL+0uenvCA4yFnRP+G83z0:w8pM+b4lyz2iIFWHCnsHV1iQXudIv6IF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3eb1bb0f1b04071a0df86f7aec71887a_JaffaCakes118

Files

3eb1bb0f1b04071a0df86f7aec71887a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d96ce5636be3702e6153416267afe058

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord519
ord593
ord594
ord595
ord304
ord598
ord520
ord631
ord632
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
ord564
EVENT_SINK_Release
ord600
ord310
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord312
ord712
ord606
ord607
ord608
ord716
ord717
ProcCallEngine
ord537
ord647
ord572
ord573
ord681
ord100
ord612
ord616
ord617
ord619
ord581

Sections

.text
Size: 776KB - Virtual size: 774KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ