0139a061ff30ea4890cf4a2790ae2626_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0139a061ff30ea4890cf4a2790ae2626_JaffaCakes118
Size

500KB
MD5

0139a061ff30ea4890cf4a2790ae2626
SHA1

43b7370ac9da686d412de012fa85126133b3cbd6
SHA256

e31933f4f25833e7ab289735936bb101ad6e943b7398b80a3698ebea5d76c703
SHA512

cbfadf294e7a2dbc333379890697cae0fd863d3574b5be8f021409e0aa1a27ad7ded9d60d21f63a2ef1598af6668a85a7b11cce500b4c45f825a36c4f240cdaa
SSDEEP

12288:VHBxcyyAaIbvjhdaks5j0MLCzITNJdg4NKmXrlRD:gAaYFdakKj0MdhggfD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0139a061ff30ea4890cf4a2790ae2626_JaffaCakes118

Files

0139a061ff30ea4890cf4a2790ae2626_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d0ae2d751ba6d7d3797fe1eb98339323

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

expsrv

DllFunctionCall

msvbvm60

ord631
ord526
DllFunctionCall
__vbaExceptHandler
ord712
ProcCallEngine
ord644
ord537
ord100
BASIC_CLASS_AddRef

Sections

.text
Size: 128KB - Virtual size: 127KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 368KB - Virtual size: 365KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ