075007642b0455ec4138eb0e88bbcc40_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

075007642b0455ec4138eb0e88bbcc40_JaffaCakes118
Size

124KB
MD5

075007642b0455ec4138eb0e88bbcc40
SHA1

2463993f11dd54cf02eb527ac608b223fea6dd7d
SHA256

52bc965e4bff74caf4831d75442c9ee1dac98d84de55e769ff47cf8413a3ad8a
SHA512

6365f13cb922162bc16ae35d17f72b01ec7ceb37b375edaa68ff7c0ffa328dc396ad33f98ed819e216f54fcddd9121d8e953d7a74977e5caf24eed8656b0fad0
SSDEEP

1536:yaONzSpBc5Xqb/8lcSAovLiZUI8ULmrNrNi3c1oHAtqGIiDAqaDy7fP:qlZvLs8FhR04oG8VDy7fP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
075007642b0455ec4138eb0e88bbcc40_JaffaCakes118

Files

075007642b0455ec4138eb0e88bbcc40_JaffaCakes118
.exe windows:4 windows x86 arch:x86

206bfed36d2f5acde99bf22e88f8de8f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord518
ord666
ord593
ord594
ord598
ord520
ord631
ord632
DllFunctionCall
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord535
ord537
ord644
ord648
ord681
ord578
ord100
ord617
ord619
ord581

Sections

.text
Size: 76KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ