f97f3b88fd4c66871788af736764badb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f97f3b88fd4c66871788af736764badb_JaffaCakes118
Size

140KB
MD5

f97f3b88fd4c66871788af736764badb
SHA1

c3c3128d559b3d12d2a8bf6c6d9032995f706607
SHA256

45b64cb04876d174ba38959fe9794093369d56c356252d2b1281e0777462de60
SHA512

b923e9123de16cd3fba47af65fab255129fdc68a782d0f5db5ca79274bf0e97d9fd8e62da4dcde9a348f4fd85303a7c74d81b3d97eb6209cc9e5c0e2ae8ee323
SSDEEP

1536:vY5dLiSKsPMd/Gml67R/IQjsNooiRuLqaP+nJZqW5YDMRuyPaq6CHlYw2zMBhYEw:wdLcl03omoiRuu3ZHV/PaqNlASqp5j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f97f3b88fd4c66871788af736764badb_JaffaCakes118

Files

f97f3b88fd4c66871788af736764badb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8a74fcfd45f74d882885de250a96a05d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord518
ord593
ord594
ord631
ord632
ord526
ord529
DllFunctionCall
ord563
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord716
ord717
ProcCallEngine
ord537
ord644
ord648
ord570
ord572
ord573
ord578
ord685
ord100
ord616
ord618
ord581

Sections

.text
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 88KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ