34c2be8aaabe12e7891efcd86123c2aa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

34c2be8aaabe12e7891efcd86123c2aa_JaffaCakes118
Size

52KB
MD5

34c2be8aaabe12e7891efcd86123c2aa
SHA1

e4dce174d9fbc84a9a455e9c7c3aa66df91e5bf2
SHA256

cff2caa3f1c5f7f58ea09751868f91669f4a8a92d9b3c19d598a58f0f6fd6860
SHA512

5c4aab2eb1366efdb5293e4a43f7e704a5c79741dfb4bc54eeacbe11ef14d33f85cc50c1031a44fb4755e46261157a932f21696240c2f45c9a5b50bcb438691a
SSDEEP

768:CSRsP7f9J0sPlQ1h0kuVCyISZwQNSWydMp0vv+M/LyiXihdAKp:C8UlkhLuVtIthd2Q2uxXkA4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
34c2be8aaabe12e7891efcd86123c2aa_JaffaCakes118

Files

34c2be8aaabe12e7891efcd86123c2aa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3285d708258db104358112a3347a577d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CallWindowProcW

msvbvm60

MethCallEngine
ord518
ord626
ord665
ord666
ord598
ord631
ord709
ord632
EVENT_SINK_AddRef
ord528
ord529
ord670
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ord716
ord717
ProcCallEngine
ord537
ord644
ord645
ord648
ord576
ord578
ord100
ord616
ord617
ord580
ord581

Sections

.text
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ