34354adab5f2ecfc1964c4b5c9624353_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

34354adab5f2ecfc1964c4b5c9624353_JaffaCakes118
Size

496KB
MD5

34354adab5f2ecfc1964c4b5c9624353
SHA1

0f4f20b27380c1ca5dfd1ab5793aec13268eb6b8
SHA256

dcf41e4cfdb5e4aca47a4b5ebdb51dd4fe03ec718528afbb2cc12f8b82dbcef2
SHA512

4a695ab2317ad73bc6a8fcc698566595e3f18a6cabebfa7d8a0fbfb02ce530acc507b2bc37f4025e2f4651014e7a3af41889dcb7182881945575868f4fb7fb34
SSDEEP

12288:GIEmDz+i2xWEeWHiRI7JqF84lLf32cAzcLij:sA2xeFRI7StMjzmi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
34354adab5f2ecfc1964c4b5c9624353_JaffaCakes118

Files

34354adab5f2ecfc1964c4b5c9624353_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dfa5ffad8eac71a7f4d657763f159c5e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord716
ord717
ProcCallEngine
ord537
ord644
ord573
ord100
ord616
ord619

Sections

.text
Size: 76KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wBUx
Size: 412KB - Virtual size: 412KB