34f8b04a0540cda221fb368cf3330838_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

34f8b04a0540cda221fb368cf3330838_JaffaCakes118
Size

196KB
MD5

34f8b04a0540cda221fb368cf3330838
SHA1

69dcedd939f69d0c88c28db0e118c70fd263423e
SHA256

7ed658d4d66ed15f51586d68ea63a38a3e6364c7ff72083e1cd4586f62b5dbff
SHA512

96bc28e58f34414362c4c3c5fba3d1a08fba6f478b48584647f0e2e372a228b64c224acee1c4f421421a96d433e36a5a83b1f84499a9bc17675627ea10843a33
SSDEEP

3072:2NW9XdqaFCuhjkNr30NIFO4wRavzztkormZQSyws9bLxpIesNeGDhiDQ2aDLUDiF:v4G0o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
34f8b04a0540cda221fb368cf3330838_JaffaCakes118

Files

34f8b04a0540cda221fb368cf3330838_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dc606cd5ecfee06af1b3ad7982936074

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
ord516
ord628
ord631
EVENT_SINK_AddRef
DllFunctionCall
ord563
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord717
ProcCallEngine
ord644
ord537
ord100

Sections

.text
Size: 172KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ