43482d098e195b656e54977dce80b5f0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

43482d098e195b656e54977dce80b5f0_JaffaCakes118
Size

300KB
MD5

43482d098e195b656e54977dce80b5f0
SHA1

11e3b1480b1d28585d41a8977b40aab6edc15e33
SHA256

ddaef6b4bb022511ab3aee39fedd3d8281398492ff302043f3a26695926a167b
SHA512

10443b57b097513fa11e3f4a454caf5e33e79308e21dba02af06671f45bbcce0e4f459d6db4f7a67882294505fce950275c146a6973aea1f2990e774c65941c8
SSDEEP

3072:gjobicvNyopVpCV0dCvsBpID5n+nJNqRhnuNqRN9zQkLkjgqTCkigqTNFmFnNIWF:gjlcvNyoJCGCvsBpIen

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43482d098e195b656e54977dce80b5f0_JaffaCakes118

Files

43482d098e195b656e54977dce80b5f0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4870b2a06b34732f77b9dfc07e9b0b7c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord588
MethCallEngine
ord516
ord593
ord594
ord595
ord631
ord632
ord525
ord526
EVENT_SINK_AddRef
ord529
ord561
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord608
ord717
ProcCallEngine
ord644
ord537
ord645
ord570
ord648
ord572
ord573
ord681
ord578
ord685
ord100
ord581

Sections

.text
Size: 284KB - Virtual size: 283KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ