d39ca8ce9fffd022b6304265c6e34465_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d39ca8ce9fffd022b6304265c6e34465_JaffaCakes118
Size

636KB
MD5

d39ca8ce9fffd022b6304265c6e34465
SHA1

bc94ee6919270af7c4b6a4d301833066ebda55f9
SHA256

954178adbba3b91a545db07904bbb992c4d8988e6a21b4e99ea83d4fb91ae289
SHA512

7b9a922ca592eaa8917e1203205c9b5498603e4dc4ff3114793e6be615f75a832ea7c5497af1d9011024134f00873da291b2716cbd03ac6f75b0404fb4a1e949
SSDEEP

12288:X9333APA9xInWtafcUK5OSW5mdutP4qe6dgX8u1wGqfoqs9nQ8:XtkA9xsWtIcUAORnHkwGK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d39ca8ce9fffd022b6304265c6e34465_JaffaCakes118

Files

d39ca8ce9fffd022b6304265c6e34465_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9d51831fba20ad1956270c0b24f97c23

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord629
ord662
ord666
ord594
ord595
ord598
ord706
ord631
ord633
EVENT_SINK_AddRef
ord563
ord670
ord564
ord672
ord673
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord607
ord608
ord530
ord532
ord536
ord537
ord647
ord648
ord571
ord575
ord683
ord685
ord100
ord610
ord613
ord614
ord616
ord617
ord542

Sections

.text
Size: 600KB - Virtual size: 598KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ