839ad6102672841cf16a0d6400cf1289_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

839ad6102672841cf16a0d6400cf1289_JaffaCakes118
Size

68KB
MD5

839ad6102672841cf16a0d6400cf1289
SHA1

6de790a0b567211a338c9963bd4bc705581a794a
SHA256

419836076bfae45545f8ffd6436038adfe434a1e1fb10d72f95c2359e550a239
SHA512

e31c3c7bdda87e01ae3d76bc1f880b99eb3ea7aae0cb694c780b58c0c138a1d86d0ed844817171a1cd2e75981a32a5892cf5b2e7a3a5a425d901edd8736c54aa
SSDEEP

768:QXFXOft1dAv6iAOjuIkNuGtg7sHjmwqlgyyUVMY8H9XmhZfJNNstDZqvF/Y/JXb:t11d86qp7sHjmwqlgyJqWZfJ8z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
839ad6102672841cf16a0d6400cf1289_JaffaCakes118

Files

839ad6102672841cf16a0d6400cf1289_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e0cfd3d90c5fea16b8b8c41edc39d4cc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord666
ord595
ord632
ord526
EVENT_SINK_AddRef
ord528
ord561
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord537
ord644
ord573
ord100
ord617
ord581

Sections

.text
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ