343afb83d48b30ee73b38e6ac29d6e20_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

343afb83d48b30ee73b38e6ac29d6e20_JaffaCakes118
Size

36KB
MD5

343afb83d48b30ee73b38e6ac29d6e20
SHA1

f22b56b94bafc8a63861965752afb202bd043c3a
SHA256

142e247219693ac4cb2e2f168976c931693f28e1fa954e664c37a94df3de603c
SHA512

37520d161e85691d2e9da25adf74d6a5d0d2d623766c8526040be2ed73ed2128da11aee7be589a646aafd77132f06f6dca2cd0b3701c48d4b23a586f9db4c8d0
SSDEEP

768:0rdQJ/unzzdIacupF4or1BQwHFQCmIyMLC6Nx:SCJmn1Iac8xBQUiIyMLC6/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
343afb83d48b30ee73b38e6ac29d6e20_JaffaCakes118

Files

343afb83d48b30ee73b38e6ac29d6e20_JaffaCakes118
.exe windows:4 windows x86 arch:x86

959eaa06780a42199bfd2f51e65e327e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord517
ord518
ord666
ord593
ord594
ord598
ord520
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
ord563
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord713
ord608
ord531
ord716
ProcCallEngine
ord537
ord648
ord681
ord100
ord616
ord618
ord619
ord581

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE