38672ef7043367e4546959c59d903f54_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38672ef7043367e4546959c59d903f54_JaffaCakes118
Size

34KB
MD5

38672ef7043367e4546959c59d903f54
SHA1

ba1c259d949046aecab36fb86640908f98c6e3a8
SHA256

689a31f7ef66c1b8acbf0bdcd170ee1aae3242d129e6f64278149cc9bfc2174e
SHA512

29b183865e177320064a512fdcf783354b22cbae9df5b6a823a375d8de5d291f3d956a2591d6b95e89ccbdc93b8de72cd5b00880adf1e64ee3e0ff2cdb60304c
SSDEEP

384:68zsH6N7mbayNfLdHrIH8miQ8CMPKqA0waMaSJEytrrDb2Y8:688myNRH0HjLMPKqA0rdV2n8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38672ef7043367e4546959c59d903f54_JaffaCakes118

Files

38672ef7043367e4546959c59d903f54_JaffaCakes118
.exe windows:4 windows x86 arch:x86

34e2d797a94956491d53d3ca367172ac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord582
MethCallEngine
ord626
ord666
ord593
ord594
ord595
ord598
ord520
ord525
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord608
ord534
ProcCallEngine
ord535
ord536
ord645
ord100
ord617
ord619
ord581

Sections

.text
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ