390b6cf95e00e54c878e65c68437656b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

390b6cf95e00e54c878e65c68437656b_JaffaCakes118
Size

88KB
MD5

390b6cf95e00e54c878e65c68437656b
SHA1

1784909ba91a612bc4cbac5d572b9ca388b17639
SHA256

adcf5470dae1c1988086016c063950ecfe48aad75eff6a4db10a4afe63ff796e
SHA512

a5f75dcb6a3f65e0e3d6947e7cc1f74d6ea7fb65f846bce0df2120db98015cc6a168bbcff6a6bc31a80f4d365b243b3b242b697ea5ca5f3aea3aa3184b93b0a3
SSDEEP

1536:bNqSQSpy8tXG06YpqdXTsYJ/F+FBFIFGFYF7DUZxTZcua:6Ss0G0mZRn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
390b6cf95e00e54c878e65c68437656b_JaffaCakes118

Files

390b6cf95e00e54c878e65c68437656b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1d08d703f8ec81dff9da409d9a6a4c9e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
MethCallEngine
ord518
ord594
ord598
ord520
ord709
ord632
EVENT_SINK_AddRef
ord528
ord670
ord564
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord717
ProcCallEngine
ord535
ord537
ord644
ord645
ord570
ord100
ord431
ord617
ord619

Sections

.text
Size: 76KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ