34ce55233c3a5a8819fe1de1ce511fa3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

34ce55233c3a5a8819fe1de1ce511fa3_JaffaCakes118
Size

156KB
MD5

34ce55233c3a5a8819fe1de1ce511fa3
SHA1

d3f60cb9c4e9c54a0dce4fbdde7da66e34bfa78c
SHA256

de84f6ab454f3a496842c17a227f38e2b02d6dc2e72c9ee803bdd87bb0245327
SHA512

db401d95d41ffcff8f7df025a3ce74624758bc048b6f47eb16dd17be0648013805e94d38e5babadc0deda42e58a5e24b5fe619d5f325be65dcea22c7f1778606
SSDEEP

3072:klH3TXOFTeOVJTIuphvCCVMxpEy0G4bvWK7yPWKaUhS+AC70K3G0+07oKz1h:klH3TXOFTeOVVRK8jgK7yraUhS+AC7hf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
34ce55233c3a5a8819fe1de1ce511fa3_JaffaCakes118

Files

34ce55233c3a5a8819fe1de1ce511fa3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d1e24a6cb83a3ae5fe4854b0adcb94df

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord665
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord607
ord608
ord717
ProcCallEngine
ord644
ord537
ord573
ord681
ord100
ord616
ord618
ord581

Sections

.text
Size: 148KB - Virtual size: 147KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ