07f8659f25b214a5eb43f515d09a038c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

07f8659f25b214a5eb43f515d09a038c_JaffaCakes118
Size

600KB
MD5

07f8659f25b214a5eb43f515d09a038c
SHA1

743ba1e1797d4002d79f034f3a85d03e93ad92f6
SHA256

ff25c47a9f640df529d8db15491d84189f3b527a27124014cbdd489f101e9442
SHA512

360f574c981900902f7e65141af37f78979e122dcd569e13df1365bce86c944ce3a3316a7d7b6029935127db54e18bc58c7a9754e0ae2a633845faae81e7c05e
SSDEEP

12288:xff7dvLlEC1yuaDjlPff7dvLlEC1yuaDjlY:xff7tREr1jlPff7tREr1jlY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07f8659f25b214a5eb43f515d09a038c_JaffaCakes118

Files

07f8659f25b214a5eb43f515d09a038c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5147b69a1b7fcde1e7bcf36da71618a1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord593
ord594
ord631
ord709
ord525
DllFunctionCall
ord600
__vbaExceptHandler
ord531
ord717
ProcCallEngine
ord537
ord645
ord648
ord572
ord681
ord100
ord616
ord618

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 588KB - Virtual size: 586KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ