39e77282de7086bf48193d34ceeb29c4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

39e77282de7086bf48193d34ceeb29c4_JaffaCakes118
Size

172KB
MD5

39e77282de7086bf48193d34ceeb29c4
SHA1

0b46c23835f1cf7f09262ef68755f7d1f1a922a8
SHA256

d8c0e2d1e880a499fca9a9ff90f54e76fa7ea4506c64eb94795d0bbd9e39eeb2
SHA512

900e7d68b88a7afc7105ae0c751744990cb81e876a1881774a74a1fe738c0cc8f08abd73b88b0358f485c3156620437fde0c6645dc8679219627966a502e37f4
SSDEEP

1536:j7y7NF8toibWfvhxsHJEWuOaSaaMPBXVcug23VBc1hjMriWdjyhwIHlBlJEMSXVN:CD8tI0JpTMpKB+VB3yw0S2y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39e77282de7086bf48193d34ceeb29c4_JaffaCakes118

Files

39e77282de7086bf48193d34ceeb29c4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ea659fdd9acea2745b8192aa6d23dbe5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord582
ord583
ord584
ord516
ord660
ord593
ord594
ord520
ord632
EVENT_SINK_AddRef
ord561
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord535
ord644
Zombie_AddRef
ord573
ord681
ord575
ord100
ord546
ord581

Sections

.text
Size: 156KB - Virtual size: 155KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ