334d9f6c3d32df229de1a9d7f7ae1050_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

334d9f6c3d32df229de1a9d7f7ae1050_JaffaCakes118
Size

336KB
MD5

334d9f6c3d32df229de1a9d7f7ae1050
SHA1

d24cf03a1b11500181c08b6879b16a319e64c6de
SHA256

5b4ef2daebea48b4392976c1a8243fc2910d5cae2ffda586c7ad59e94c11063f
SHA512

93ef8df4c09b37a617a40ce0575203723b48ee6dc6f5a4816ad66bfd2d9fdcc6248e02424be0a664dd641a6951c488bd13b7a7c1e67b494cee8119df9f7489a1
SSDEEP

6144:H2g05GN2fcb1DowsMJwwhK9+XRI4i0I7I53:3SGIUZ7sMjK5AY+3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
334d9f6c3d32df229de1a9d7f7ae1050_JaffaCakes118

Files

334d9f6c3d32df229de1a9d7f7ae1050_JaffaCakes118
.exe windows:4 windows x86 arch:x86

843542f13f719d519ba2c777aa9aaf60

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord595
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord608
ord717
ProcCallEngine
ord644
ord645
ord573
ord100
ord617
ord650

Sections

.text
Size: 304KB - Virtual size: 303KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ