38b4d5b89ababd41eb9da8b376e179e7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38b4d5b89ababd41eb9da8b376e179e7_JaffaCakes118
Size

80KB
MD5

38b4d5b89ababd41eb9da8b376e179e7
SHA1

9a500a81f9c368d7b70e3b4f7c97a31fde12222e
SHA256

87bcbd267b575d7aa591b8b7e2a5b9a747e3702b2f8c1cfc0c41f2f525300818
SHA512

975d6a6da49291ebb8557aac48be17eb24b61b2ea44e5da492ce849c55a4f8a9e5960e46823eed2a5cf275b84ba1e69c902c7bb4c0f4eee34f202005af2cd490
SSDEEP

768:ZCo5qFoQQbwB1VIvXjgGk/1tsPjhdV4Gbi+fKBa+VDMB:ZT7e1VkfdV1ilwB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38b4d5b89ababd41eb9da8b376e179e7_JaffaCakes118

Files

38b4d5b89ababd41eb9da8b376e179e7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6fb774c6763cc2a38c0d23ec72ad05fa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord593
ord598
ord631
ord525
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord713
ord607
ord717
ProcCallEngine
ord644
ord537
ord570
ord648
ord572
ord100
ord618

Sections

.text
Size: 72KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ