38df2a78277fe08ac8167c05774f6aa2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38df2a78277fe08ac8167c05774f6aa2_JaffaCakes118
Size

51KB
MD5

38df2a78277fe08ac8167c05774f6aa2
SHA1

78ef0e6671b88fa9cbbc4999e62e1e642d58b3bb
SHA256

bd9db00d7be8322c224861e046eecce2e2acfaf54826428087cd9aaed481a788
SHA512

dd27fbdf4c80f0b63d0c4cbae6d22103754094674e4e5cf8f74565e84beb01bb0832e4cf900d8faa5cb440a601368f4c70785aeb2f342145fc661e5c63cdff02
SSDEEP

768://Cc9et/M/57hQ6GceJeTaENag0qXZmjzYnB4e2Bq2/D59MYD:HCcYt/MRlQ6VeJOKEBEBqwlT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38df2a78277fe08ac8167c05774f6aa2_JaffaCakes118

Files

38df2a78277fe08ac8167c05774f6aa2_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a6c7ed9b0e5271086df8b3fd493bb231

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord582
MethCallEngine
ord517
ord626
ord667
ord593
ord594
ord595
ord521
ord631
ord525
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord606
ord717
ord534
ProcCallEngine
ord535
ord536
ord537
ord681
ord578
ord685
ord100
ord616
ord618

Sections

.text
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ