43b3a1f2c16b724be0c952122dddbfe7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

43b3a1f2c16b724be0c952122dddbfe7_JaffaCakes118
Size

156KB
MD5

43b3a1f2c16b724be0c952122dddbfe7
SHA1

ea6cc366e3d1dac0acc3240b28424d10d5984e33
SHA256

1a215ba1eb9040497aa0e406311396f3e50f4ae83f047613f467489fb4439c66
SHA512

85303744dd3e1aad7f1806f1e530e36177037049713c91ce5120cd4a053888251b186a48fbb60fe2b90386c026ed325ad9a9a061fcd618421468b1fdf196df73
SSDEEP

3072:kLg4knOhpJrDT00lGIai6dE+lFtD+lUZr5vxDmNN88:xa00lGI+WeWqr55mNN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43b3a1f2c16b724be0c952122dddbfe7_JaffaCakes118

Files

43b3a1f2c16b724be0c952122dddbfe7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

74a1ab118d086434849f76ad544f9e06

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord598
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord644
ord537
ord100

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ