3f13d369ce50d0f7b5ea3cace0eaa764_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3f13d369ce50d0f7b5ea3cace0eaa764_JaffaCakes118
Size

54KB
MD5

3f13d369ce50d0f7b5ea3cace0eaa764
SHA1

5d349f64a5672d2da532f5fcfb352590b0da8b87
SHA256

6f9cbf888e668bca9e868735aec4c0c9d14a4239cea7469ec04edf713c2acab4
SHA512

659bf365a087c6e91f17af28fe868f71e5faaffb73047a6dff66129150e3e171b20134f5a220a39ebeefc15f4c4bf84c192fcd4240c0a7ccb78c7170246e5c6d
SSDEEP

768:UWGUfg8dPG+23hDlA86xBn3I1E9Tqcrh5SzHfbAj6jQujcoCvBf/reIL34NwqaLX:SWR2RDG8MNqcrhmjtjQ4CvBLLL34NHi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f13d369ce50d0f7b5ea3cace0eaa764_JaffaCakes118

Files

3f13d369ce50d0f7b5ea3cace0eaa764_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0b77b268914ac935809a4581c76b9345

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
ord563
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ord716
ord717
ProcCallEngine
ord644
ord648
ord681
ord100
ord617

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ