838d3f2be8dfca3dfc3764802eac0a2e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

838d3f2be8dfca3dfc3764802eac0a2e_JaffaCakes118
Size

696KB
MD5

838d3f2be8dfca3dfc3764802eac0a2e
SHA1

58da86c46c6a271fcfed4fad636baf7c37aa29f2
SHA256

b34f3c11cd10b28ad14d10b2c12d8e2c37077e520e787700f00a085199d22751
SHA512

d76eb6b662cd2f1cd9e41fb1f67d550d946346f9fa5a691325e33ab117a0014cb6b7b472e74299b94a8a3788f438fb183987ad967723caa243678f89f433a4ee
SSDEEP

6144:dx0xXYRc9xgUcEhYWBfmj53KgO3kPZmv1nW5MjyFuA2vJLRtacpm:dx0ximgUTuwfmj56kx21nW5MOedXacp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
838d3f2be8dfca3dfc3764802eac0a2e_JaffaCakes118

Files

838d3f2be8dfca3dfc3764802eac0a2e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

425e42bd7e78bfa1b8353b588abf9ed2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord516
ord595
ord598
ord520
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ProcCallEngine
ord535
ord537
ord100
ord689
ord610
ord617

Sections

.text
Size: 628KB - Virtual size: 627KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ