939f67a0ad0fb62cbe3167c713921545_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

939f67a0ad0fb62cbe3167c713921545_JaffaCakes118
Size

20KB
MD5

939f67a0ad0fb62cbe3167c713921545
SHA1

6ed7d0b26b95833088d583e0144d6799db711996
SHA256

180532bcc1d84393280fec578f5630977cb1d1aa3926aea9d80082149695d6dc
SHA512

4511ba7aefa9cf8a2bb5a802f13be5b91b12b27a9568833901cbfd97989bfccaf50b59e362242173bbb8fba1ed47f2cf69fe509e52cf15e079799ee4516e8490
SSDEEP

192:CaP+ElO46/2un11ufpEjIznWzeIQbLGkKuH5edWaCmEV:Ca5Oz/2u122jin+g6kKmedWaCmEV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
939f67a0ad0fb62cbe3167c713921545_JaffaCakes118

Files

939f67a0ad0fb62cbe3167c713921545_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7107b9b4f33e378edef67cf2189e0171

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord631
ord709
ord525
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ord609
ord717
ProcCallEngine
ord644
ord647
ord100
ord689
ord616
ord617

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ