390ddb5fb7ac02ea61f8bae0b0af288e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

390ddb5fb7ac02ea61f8bae0b0af288e_JaffaCakes118
Size

44KB
MD5

390ddb5fb7ac02ea61f8bae0b0af288e
SHA1

a0d0589930bfd3a93770bd86bd361bfee8a46fbb
SHA256

d6087843db2ee0d1b9ee0ea15e8ae8c80f15f9edb4aa181355ff6112e27dc280
SHA512

f9c80c5c7b72558d3c7cea820dd46bb1bf1cd632811823543a01e529497a055c2a4db719dbfb7c78bf1ff790440f615926263641f51e568ec113ca8b29327188
SSDEEP

384:ZDacXh1RBmUeqGr8zOaz8M+/xRbGP7tM521nWdf+TPUlp77W9gLH+j1jsQ6OXrtH:04UcGkDz8LxRoP877i9gbKjsBo0XR9OH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
390ddb5fb7ac02ea61f8bae0b0af288e_JaffaCakes118

Files

390ddb5fb7ac02ea61f8bae0b0af288e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4aa72de9bdf3639771f6e69561454fca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
__vbaCopyBytes
ord598
ord631
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord608
ProcCallEngine
ord644
ord100
ord616

Sections

.text
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ