43360df57e1be703fab3fed3326cf38d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

43360df57e1be703fab3fed3326cf38d_JaffaCakes118
Size

32KB
MD5

43360df57e1be703fab3fed3326cf38d
SHA1

6682b4d43211601d5330fc9edf177b8573ddc430
SHA256

302ab498ed7e32cf42fb823f389d6e054cb81fdb0e3b13a14c4ca91addaaabf9
SHA512

6c7e8ec285d6d6d3d0ff906861a0c6b50e077d590217446235e01f3b7e0552a83cccfe7410c7f9c2b18ed202a90a068e74faafedea2f1126f1400eb09dfd6379
SSDEEP

192:7yn4Ggw0+gLhEMlKk+fZlNcuLaaN8nncnnncnnncnnncnnncnnncnnncnnncnnn4:W4GV58EMlKDyqHAyUUBOPj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43360df57e1be703fab3fed3326cf38d_JaffaCakes118

Files

43360df57e1be703fab3fed3326cf38d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8b377ce2596878ff0aec85b7dbfabdd9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CallWindowProcA

kernel32

GetProcAddress
LoadLibraryA

msvbvm60

DllFunctionCall
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord100
ord616

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ