342f3deb5c8b9b81eed662e9eb21b90d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

342f3deb5c8b9b81eed662e9eb21b90d_JaffaCakes118
Size

84KB
MD5

342f3deb5c8b9b81eed662e9eb21b90d
SHA1

3871c83db7f4f18c71e185f28b955d5fa9b79230
SHA256

4d1935f74f7d2a370039cfad227cf435b3011893c14b02cab9839ff088fd46e7
SHA512

a57d28d4f01f7103f7156d97dafd6241d43fdee4983fe1a2efdff35f57b1aba525eca0b9e1f5ab86c5d133eb47b64886fe50b720c9a13ba1ce454ca4141425f6
SSDEEP

1536:gmL+v1+l3KinkS8BV3Fn14jaLnoGOHvZ:nL+JinHsLn+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
342f3deb5c8b9b81eed662e9eb21b90d_JaffaCakes118

Files

342f3deb5c8b9b81eed662e9eb21b90d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7f0742e17a4438767c6566f8fcd25b0e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord593
ord594
ord520
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ProcCallEngine
ord645
ord570
ord648
ord573
ord578
ord100
ord579
ord689
ord612
ord617
ord619

Sections

.text
Size: 76KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ