543b89029724ca23d2f0f7cb4a46b210_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

543b89029724ca23d2f0f7cb4a46b210_JaffaCakes118
Size

204KB
MD5

543b89029724ca23d2f0f7cb4a46b210
SHA1

97486a9a261742cceaf921cb07c701568ee275a8
SHA256

d9fbe6da575cf79807e8c1bc7a60080bba9624654fd24ab26a04e7c54511f3b1
SHA512

1cfa339bdc833a1a555223c39940d7b93c82e595fe951ab550bf94a45daa260566eff5914a90f4d1664752c4731233e21b225d5494565d932f5aeeda33e79049
SSDEEP

3072:4nrOrWhcqCqTSwktb48XixnUWcQZZyhmLmDJx/3F1AHc7/py14j:4narWWq9S1tb4MhWcIgr/Zjs1c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
543b89029724ca23d2f0f7cb4a46b210_JaffaCakes118

Files

543b89029724ca23d2f0f7cb4a46b210_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7ef2ec3952b48402463d5d1fb5823cb2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord595
ord520
ord631
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord607
ord608
ord717
ProcCallEngine
ord644
ord645
ord570
ord648
ord573
ord681
ord578
ord685
ord100
ord616
ord617
ord618
ord619

Sections

.text
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 128KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ