1025c3ec1e80c854ac16539e48bd9240_JaffaCakes118 | Triage

Sharing

General

Target

1025c3ec1e80c854ac16539e48bd9240_JaffaCakes118
Size

68KB
MD5

1025c3ec1e80c854ac16539e48bd9240
SHA1

879b921bf5ff822c3b83a5271efe7be449dc80f1
SHA256

36d84ba8205e44a2f68c20823860bda279d8bf886bfcff4673ee3455c3d51b29
SHA512

841db24d7a021cf57dc14c4fa99c9c406bc0a015c118596ecc1be62b665ab364e450d1908e319d4327ae176e81d90b857e590110b20be62cefd475e308a282a9
SSDEEP

768:pu9DoGmlLdVAZN/KY0QQ1iR0YVRkvDLqaPTOK:prGmlLdVAZN/H0cRVkPPTOK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1025c3ec1e80c854ac16539e48bd9240_JaffaCakes118

Files

1025c3ec1e80c854ac16539e48bd9240_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2f1a9632d5272bd51feb8782538f2254

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
ord593
ord594
ord631
ord709
ord528
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord537
ord644
ord648
ord578
ord100
ord431
ord616
ord617
ord618

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ