39a459ab6cc8e31793435723cbaf1c34_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

39a459ab6cc8e31793435723cbaf1c34_JaffaCakes118
Size

24KB
MD5

39a459ab6cc8e31793435723cbaf1c34
SHA1

028bbac8027bc92f3877f6c84c9e04ab19c89b3d
SHA256

6322ff5fa4da52974d772d3e32ae5f29112a24e7b00dab067737d0a27210df1a
SHA512

52ca8fb17224fe0452212ab45687ac6395d675b19a321180922579aa589d48393e16a8eea766577fe136777a569506b73391f2e41b5cbe7907dc5f7355fe7a88
SSDEEP

192:pqmx4EQPBgVBvmKgPHpq+KObwR7CFkNDQTS8yQpkCh/R6ZtVdl2nhS3onAXsJn03:J1yBgVRsHpqmsFCkNfGTwZHH2hS4wkk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39a459ab6cc8e31793435723cbaf1c34_JaffaCakes118

Files

39a459ab6cc8e31793435723cbaf1c34_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1574e2dce682227e468a2f15da7db157

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord582
MethCallEngine
ord593
ord594
ord595
ord598
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ProcCallEngine
ord537
ord100
ord616
ord619

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ