00ba12e392f050515aad3b887f7fc3cb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00ba12e392f050515aad3b887f7fc3cb_JaffaCakes118
Size

132KB
MD5

00ba12e392f050515aad3b887f7fc3cb
SHA1

bf53ba415cf61da9bc1199343e5930233f7dd611
SHA256

4e8556b11471f964cdc9e30675658a109763e2fb7d8b403d645cb2df0d0c9a9c
SHA512

3b9152ae3d13d32969c9f843ccfb44b6d1badf092aa224db8138bb9c5d7d720fbad4c9808f8317549d2b6268bdf28843c31bc3f4331b6343888f70dbc717a129
SSDEEP

3072:WQjf1KuSbB3BWYz2CVlQ4JGqSsRzzl606:nKuSLPVM43Skzzl606

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00ba12e392f050515aad3b887f7fc3cb_JaffaCakes118

Files

00ba12e392f050515aad3b887f7fc3cb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4674aa1054266cb6d88f8b15794374a0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord518
ord626
ord666
ord595
ord632
ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord608
ProcCallEngine
ord644
ord570
ord648
ord100

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 116KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ