348be974a4f3bad0a06f9fb81d644995_JaffaCakes118 | Triage

Sharing

General

Target

348be974a4f3bad0a06f9fb81d644995_JaffaCakes118
Size

238KB
MD5

348be974a4f3bad0a06f9fb81d644995
SHA1

32246cbdac49e85394e10476f6fdf6c4212fb708
SHA256

9fed12664d5d293071d3790f862bde1b80e26990420ac1307d7db50e1f3ce620
SHA512

f5bb5f37bb648ab5847e9ff2634b1e7435ead36c67ab7a46a9d56a985339c396e1557adebc567fa2c03122a2120eda20962cfe12d72242726a362832f886c8d8
SSDEEP

3072:UPE45bnevu5STPQm32FszuZMrBre4xj221PAjt6TGUjDgoLbklxsSwkusktKqLpB:MEObTqN3F1sW7vgoLrr9tRLQO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
348be974a4f3bad0a06f9fb81d644995_JaffaCakes118

Files

348be974a4f3bad0a06f9fb81d644995_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f305dbec70bbc526bf5bfe1e3ff354bc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord598
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord713
ord608
ord717
ProcCallEngine
ord644
ord537
ord681
ord578
ord100
ord616
ord581

Sections

.text
Size: 56KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ