16d9b9d761fda93415a7c0306dce2071_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16d9b9d761fda93415a7c0306dce2071_JaffaCakes118
Size

76KB
MD5

16d9b9d761fda93415a7c0306dce2071
SHA1

8b6b52cc2108f41ca9401d443deaf29c975d187f
SHA256

cfd0b6a963f1776565bf3771eac79a3e4b4268be737b6c98b339d84521627432
SHA512

0fb6784d9ebf407fd5f2cdc0c6f0ae791e49589f37ea37f26afd70603ff18c91b9d454add473340cbebc946127038bb4a72eaba69e9b44ed05ae9ef2c3369b8f
SSDEEP

1536:WjzsoXkJHAtrtUhD9swPq7h6TpQcWlmxcmNFUFHF1T:QzRXGqtcD9sBFRc+mamNeRFN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16d9b9d761fda93415a7c0306dce2071_JaffaCakes118

Files

16d9b9d761fda93415a7c0306dce2071_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e39d037acde6b096f84bdccfceac0cd4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord666
ord595
ord631
ord526
DllFunctionCall
ord601
__vbaExceptHandler
ord711
ord606
ord717
ProcCallEngine
ord644
ord537
ord578
ord100

Sections

.text
Size: 72KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ