168fb4ad5dada9aee3c5ba1cfaeee5c3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

168fb4ad5dada9aee3c5ba1cfaeee5c3_JaffaCakes118
Size

20KB
MD5

168fb4ad5dada9aee3c5ba1cfaeee5c3
SHA1

513e2cf2af01287f4abb55afbde380ad17327d74
SHA256

4346f91a0d41b4e371cbe64552d67529c2a3ce9fbaea311dc9ebec16ec400c9f
SHA512

d0bcaa419bda5cf4147f207c52d153b2b3eab0cfdb06c0eb864ae4e01d69d261e068f9286186cb2c0edc4131a604f657265efb54df2a40bf5431947f3d2977a8
SSDEEP

192:eS/vn2GO+EVvnNu2lqUcsdxLHrnp8UfiFc7FwnNxIPyEc2:FXDO++vnJqeWUqq2T0c2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
168fb4ad5dada9aee3c5ba1cfaeee5c3_JaffaCakes118

Files

168fb4ad5dada9aee3c5ba1cfaeee5c3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9dae57fda830f57867ec75da97559dbe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord621
ord518
ord666
ord520
ord632
ord529
DllFunctionCall
ord600
ord601
__vbaExceptHandler
ord711
ord712
ord608
ord716
ProcCallEngine
ord570
ord648
ord578
ord100

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ