38856dd8ae7f21d42c00bdc3aca4e062_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38856dd8ae7f21d42c00bdc3aca4e062_JaffaCakes118
Size

811KB
MD5

38856dd8ae7f21d42c00bdc3aca4e062
SHA1

4b11523a4be04925b4dc795af726274cdcf22041
SHA256

c87b802b976e5f278e5c9b5ff451739422cf6f628cc42b64eba716eb9f36cbf2
SHA512

d8478f8d840d0edcaeeb9c05e9c2b756ee68b8d613cbe42ebfd072545217d0f3f9facbea309fa75651842408f588ac0a3e06136f1463dd55f2bbb521282a7313
SSDEEP

24576:twsZeQBeXrw3EXFMvHE/OnfaUqHNhhZ7bA/zbDnwA:WsZ8EUXqPEWnfaUCv07bDwA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38856dd8ae7f21d42c00bdc3aca4e062_JaffaCakes118

Files

38856dd8ae7f21d42c00bdc3aca4e062_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f685bc176a0219e9f41b6b641ff6c317

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord598
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord608
ord716
ord717
ProcCallEngine
ord644
ord537
ord573
ord681
ord100
ord619
ord581

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc_0
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.
Size: - Virtual size: 1B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE