3fd70ef2bc420250ba335f43b8274940_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3fd70ef2bc420250ba335f43b8274940_JaffaCakes118
Size

52KB
MD5

3fd70ef2bc420250ba335f43b8274940
SHA1

31443e426aafa3384e995f33b6cd84a35d6cd6e2
SHA256

02e67606e235e69d3fe7f482a1625121217b4b0e1b2a5c3353eea6ab69b9a824
SHA512

843d40ee1db802e68d1d36ed1c91ae87b8de2094656746e6f2f513007fe94a1109fde07ed6e46d77391d9240878b7a1967b3c358d593d4e7f8a50645e87ba492
SSDEEP

384:fagwCc6eeY33B3nKXR3PLHEWsBd8TxN6M5QV1kUhgSMFCw1dbFKs:5wCeeY33B3+7EWdnC/3MYSdQs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3fd70ef2bc420250ba335f43b8274940_JaffaCakes118

Files

3fd70ef2bc420250ba335f43b8274940_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c1966b0756465dbe9829e1efca51bba7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord621
ord516
ord595
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord100
ord616

Sections

.text
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ