39ed5191066b307b6aeb322bd938ded0_JaffaCakes118 | Triage

Sharing

General

Target

39ed5191066b307b6aeb322bd938ded0_JaffaCakes118
Size

16KB
MD5

39ed5191066b307b6aeb322bd938ded0
SHA1

71d3d37db392b4f2eb62936b90f382bd3d7ef34f
SHA256

078c5b66c139fd03fa817892cd6dfe646452f922e30425fbefdfdffa94dad499
SHA512

24d918e73bac54674684d7855e1b8a65b0d9b19381ce5cc92a552dae8e3dd1a65bcee7d835a67fbada149147f9e37c4d15b2c0794f829b799b607a144c4073f9
SSDEEP

96:7ie7RC1QjSR97WBQL4isCNC4Th/0rKm37FRkSkHNnVV6+kwtwOUwBkvWV8Ci:7Aqu9PMWC4Th6KCkVNkuwuBaIs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39ed5191066b307b6aeb322bd938ded0_JaffaCakes118

Files

39ed5191066b307b6aeb322bd938ded0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

220f102408989703b880050e34bbeb34

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord666
ord598
ord632
EVENT_SINK_AddRef
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord535
ord645
ord570
ord100
ord617
ord548
ord581

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ