345454b7717175ad11d7e9ebe02d94da_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

345454b7717175ad11d7e9ebe02d94da_JaffaCakes118
Size

68KB
MD5

345454b7717175ad11d7e9ebe02d94da
SHA1

1d0b5a9fe8b51ef2c5cd4b92bc4b4aacc6722557
SHA256

a04748f45c44c70d6bb33dedfcdc3fcab5b3f70880ed7269e4081ffeb8c0b0b1
SHA512

52ae48ce2844b48bb87fe03ac3239808c574a9a3bba034f91e1b8081adc1188f90068e9b45f3853ae7a7c926940f3cc7d8d6f5896bc978c03af84844a4850c34
SSDEEP

768:bOkBe0OwpQ6ZASREaA2y3tADhb1Iozx5NbDkR08wQuXl7SFWk2U6D1gGRsbkg3kv:bOkRASS6ytDozx71mFWk2UYg0WKN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
345454b7717175ad11d7e9ebe02d94da_JaffaCakes118

Files

345454b7717175ad11d7e9ebe02d94da_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2e92a7d14fe569fbb388f4f6120f1d91

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord665
ord631
ord525
ord632
EVENT_SINK_AddRef
DllFunctionCall
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord713
ord608
ord717
ProcCallEngine
ord644
ord537
ord570
ord100
ord618

Sections

.text
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ