348d1a5fdc9e95e26c868d2d7e7d50e3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

348d1a5fdc9e95e26c868d2d7e7d50e3_JaffaCakes118
Size

105KB
MD5

348d1a5fdc9e95e26c868d2d7e7d50e3
SHA1

227f1a9fe996230a52026ad7f00d7f8a88a59e20
SHA256

387503e7d914aded9c4dcc734538e272511a3405c9975a7b8510a3dfbc2aae2f
SHA512

22d005e611780f53d9755faf589d99a37007f689f797d8ac9b0b4d4ed69ead8aabd929fd14fcb92bd4d8bc58c89506b10a2d82e44ada33a7443bbfda0f9439c2
SSDEEP

1536:gKWZpNKUW0ZyED8nZx9sT1M7QB1ZeBlVRqR0q5iOi9dGF55kcsX6Rmg9qFpnBYM:gXzZfgnviTykB/eBzRq0hdXNkqjBf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
348d1a5fdc9e95e26c868d2d7e7d50e3_JaffaCakes118

Files

348d1a5fdc9e95e26c868d2d7e7d50e3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e1d5d5944e80d121c0a88ee184008ac1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord666
ord598
ord631
ord526
EVENT_SINK_AddRef
ord561
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord607
ord608
ord717
ProcCallEngine
ord537
ord644
ord645
ord570
ord573
ord681
ord576
ord685
ord100
ord617
ord618
ord581

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ