f8b6fc182f79054e1e781acbac34a9c4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f8b6fc182f79054e1e781acbac34a9c4_JaffaCakes118
Size

62KB
MD5

f8b6fc182f79054e1e781acbac34a9c4
SHA1

8b41667b88d4c0021b12aeb98cfb01a72b7b7ecd
SHA256

b9482c2d11f4e5d41ca3e55967a46d5300d9dfb7fb4713df93ad17bdb5d7840b
SHA512

2c938da764ee7fc0a85bdf4bcffad51f35200723bce90fa3c06e8bd645aea7a8d0558d2304e2fb71c747a1925bddb4da45e2cd1f6d2f52e8c1e87a2d539cac00
SSDEEP

1536:HUJ4CDYFsFaEGM97WmoZsOVKFWHfxsOwKzQ:HUJnEsZ9Y5M0iKzQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f8b6fc182f79054e1e781acbac34a9c4_JaffaCakes118

Files

f8b6fc182f79054e1e781acbac34a9c4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

819fdabe46e6830522bcb72d2ef35f82

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord666
ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord570
ord100
ord616

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ