16659623d288f437f6e83e4cd952a982_JaffaCakes118 | Triage

Sharing

General

Target

16659623d288f437f6e83e4cd952a982_JaffaCakes118
Size

20KB
MD5

16659623d288f437f6e83e4cd952a982
SHA1

160bef6f58bdabd04fbb8d3c9fb328708a0513e0
SHA256

e3b32291a9801fed8f4cee4db2769fcfb1ffb55c37ef1d4c2054a345c8af598b
SHA512

0dc356f98cdd01e203ffdba4724e6a4e50746a0cd030be87507d195b2834107279ea163078992ecdbe0634f6f24aa692aa74573fbca839b236f0d81aa49c897e
SSDEEP

192:D67uJCS+BZi433XuqHcUmm7hf8rc9LbFU5Vz4TdJOiM:DfYj33X1dmmdf8rcDkKLM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16659623d288f437f6e83e4cd952a982_JaffaCakes118

Files

16659623d288f437f6e83e4cd952a982_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3a90b3536f1baa7d8548623bcfdc7402

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord553
ord667
ord593
ord594
ord595
ord631
ord526
ord529
DllFunctionCall
ord601
__vbaExceptHandler
ord711
ord606
ProcCallEngine
ord538
ord539
ord570
ord648
ord578
ord100
ord616
ord619
ord542
ord543
ord544
ord545
ord547

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ