43b59b3f4e735d1b36b70b3274428fdd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

43b59b3f4e735d1b36b70b3274428fdd_JaffaCakes118
Size

102KB
MD5

43b59b3f4e735d1b36b70b3274428fdd
SHA1

7d6455decaefacc6437a6d192a19de617f1e1a93
SHA256

b6ac2fa980c4c17c0cf704565540c6f87448efb5e75ed04dfcbd45bc832b6a22
SHA512

995fa8b624daafafd94d62b2a50c1ef0cf2b1e74e7b173b665b8235878dcbab56ebc2913e0639a110a997e26952978cc4b693e92edf8729e931b9ff40b16eb08
SSDEEP

1536:K6/LPCdigEo/Pvg2QlA42axhpsHOJRTkQI+vFc2jVIietRRCMk4wmEN+ybt+:dDno/2i4driHuTUCW2jeuMk7hN+ybt+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43b59b3f4e735d1b36b70b3274428fdd_JaffaCakes118

Files

43b59b3f4e735d1b36b70b3274428fdd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

840d010528053706ea6bf67601f29d4e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord621
ord516
ord595
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord644
ord570
ord100
ord616

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ