157f6476f9af86dc6e9c3cc3deabd2bb_JaffaCakes118 | Triage

Sharing

General

Target

157f6476f9af86dc6e9c3cc3deabd2bb_JaffaCakes118
Size

12KB
MD5

157f6476f9af86dc6e9c3cc3deabd2bb
SHA1

01670cd6b331e3e964ce8ef71939d0be42cc0c59
SHA256

c9d32f570bcce93bdffdf327fa21792835012e5fd6ed86eb9a48601be2446b10
SHA512

f6be159645b0930382e01a7a53c16a38d7f433bf6114c1478dea3dd6cdcf58c53ff3aca5fa94e9c97e07d69c349b3cd9bbfc5b6a31dcab1111303971872ec63d
SSDEEP

96:yf9b0NsvDtGY0jMnnrTbkFb7VU3js2U3s:Ig+0Y84voFHAsI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
157f6476f9af86dc6e9c3cc3deabd2bb_JaffaCakes118

Files

157f6476f9af86dc6e9c3cc3deabd2bb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b73f2c7aea6d071f18b0342a019785cb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord666
DllFunctionCall
ord600
__vbaExceptHandler
ord711
ord607
ProcCallEngine
ord570
ord100

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ