348085b70796e535ad5728fa9374ed65_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

348085b70796e535ad5728fa9374ed65_JaffaCakes118
Size

20KB
MD5

348085b70796e535ad5728fa9374ed65
SHA1

c2950ea310fde5f397ceac52e6dcdbad58d56f0d
SHA256

90d123c50b9d8a7f8785d3ce1cc0989d698a47bdfc7600c336ee53a24cc65e99
SHA512

24dda1686f052dea33ab69a8f81785d5139677a35a5346378257c14e0872fd749812d52f55b2c5ff0e60532eeebcec05ce17172a0057a004812bc26d1e2ccc78
SSDEEP

384:slm6AHHTiH71Vts/h5K63MbcvNpR0vC5/HzD1FVDSIh:deH2/h5d3MCOC5/HzD1FVDSi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
348085b70796e535ad5728fa9374ed65_JaffaCakes118

Files

348085b70796e535ad5728fa9374ed65_JaffaCakes118
.exe windows:4 windows x86 arch:x86

082dd1c668e3c05ccf2444b951ec827c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord665
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord644
ord100

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ