397cdc0d21e28b14251124c29b9b74ee_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

397cdc0d21e28b14251124c29b9b74ee_JaffaCakes118
Size

136KB
MD5

397cdc0d21e28b14251124c29b9b74ee
SHA1

7f1407cb05e4cb895eeab3d2e83932e13e486597
SHA256

fda7142bebe87309fe038ea2f85bf238ae794eaee5bcfd7980c0823b067ae97b
SHA512

7ce4ab53021c89747b573da572685bf263e7ec71b3852f82280431a36ea790ccf2644b4baad900786e1e9bb064f0f81844b7fd1e4808f0393d0ad9a6001be997
SSDEEP

3072:COSBnUJhL7KEc1UcGnfImZGDm/ySdiuP9lXMH2g+UxeN:COQnwhL7pc1U1ImZe+ySdiuPkWgLW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
397cdc0d21e28b14251124c29b9b74ee_JaffaCakes118

Files

397cdc0d21e28b14251124c29b9b74ee_JaffaCakes118
.exe windows:4 windows x86 arch:x86

869f420480d0d554f357c711bb26e379

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord595
ord631
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord717
ProcCallEngine
ord644
ord570
ord573
ord100
ord616
ord618

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ