39df73be554775b59d8a153cb89a2406_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

39df73be554775b59d8a153cb89a2406_JaffaCakes118
Size

176KB
MD5

39df73be554775b59d8a153cb89a2406
SHA1

46ea54b473575788151ac7645fbc38f6174754bd
SHA256

2b218f1029a5ed95938e3438d303c65f5a011088b0a6c07d260018ecb0169b48
SHA512

b754eab42aeaf7ea62549906b7c987a8dc191f029b8980a90e8360e8243d23b05a5dbedadc9b075bc907eba020bdb2b5cedd1b6d56032b3cd9daa5501046780a
SSDEEP

3072:fckQr0yjD28ub1wKLNcUC4FkSi4qU8v9o9wwdUlZ0c8jq+hPN+zue5R9lEtw0Uu:yreWy/gOPNiuIlEtf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39df73be554775b59d8a153cb89a2406_JaffaCakes118

Files

39df73be554775b59d8a153cb89a2406_JaffaCakes118
.exe windows:4 windows x86 arch:x86

77772e71299ceab79f8ea0c23cfed80e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryW

msvbvm60

ord696
ord666
ord667
ord593
ord594
ord598
ord709
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
ord563
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord531
ord716
ord717
ProcCallEngine
ord535
ord644
ord576
ord578
ord685
ord100
ord616
ord617
ord618
ord619
ord580

Sections

.text
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ