34484a8ecf605b3cc1b88a7d46386e2b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

34484a8ecf605b3cc1b88a7d46386e2b_JaffaCakes118
Size

96KB
MD5

34484a8ecf605b3cc1b88a7d46386e2b
SHA1

78fd629fa4ff19fa74e7c013187e43f3c67ebb27
SHA256

dbee79250e68acb6a455047b6e5c4a6fe222f2b64c313f40a3bc3c51909fcfc5
SHA512

6e46ef7f34a967e8768009ba88edf982743734108d2c8ecba124231bab0cfaf45d2acb932f1d981c139a91822679c1093c6a2960c32a413ed561e8c5fd5e8681
SSDEEP

1536:zTS1qMnK+ScCRa4WF1b1hJqafqElDLdTd75CSyP3TxSLSvqUMFlDGewfd1oWFyYl:oqMnK+vCRaLpMahvggOvqUMFlDGewfdj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
34484a8ecf605b3cc1b88a7d46386e2b_JaffaCakes118

Files

34484a8ecf605b3cc1b88a7d46386e2b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

adf8020726ed3706d39635bc132cd320

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord666
ord595
ord631
ord632
ord525
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord537
ord100
ord617
ord581

Sections

.text
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ