43d1bb42b7d9c6a70cf462d82fb66594_JaffaCakes118 | Triage

Sharing

General

Target

43d1bb42b7d9c6a70cf462d82fb66594_JaffaCakes118
Size

336KB
MD5

43d1bb42b7d9c6a70cf462d82fb66594
SHA1

1f51b48efccc9940a4b8a5735cfde2e5423c300e
SHA256

860ce0fb86ccd62fa67372719b467fe5c28b84e7c0dccbd3643014e2c52b7947
SHA512

c33f3d226b63a3bdc0d8c1be83b03a3b1fbee42117a4becfbe9abf4a5d2c4faee784c90ff1ee73b6911381428657fe43fc851a102ba1ee92bf364dd553967b9b
SSDEEP

6144:jLn9fyzVenstp0E3fpj3ju/GbRM13H5ZUXX76A05bd1:jj9CVCsgAjeeRMxU2A05h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43d1bb42b7d9c6a70cf462d82fb66594_JaffaCakes118

Files

43d1bb42b7d9c6a70cf462d82fb66594_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0370934225111de893c6cf107133df5b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CallWindowProcA

kernel32

GetProcAddress
FreeResource
LoadResource
SizeofResource
GetModuleHandleA
LoadLibraryA
LockResource
FindResourceA

msvbvm60

MethCallEngine
ord516
__vbaCopyBytes
ord669
ord593
ord595
ord598
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord535
ord644
ord537
ord645
ord648
ord100
ord617

Sections

.text
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 260KB - Virtual size: 258KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ