1845e1a2200c5554a06e9c365c34367c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1845e1a2200c5554a06e9c365c34367c_JaffaCakes118
Size

12KB
MD5

1845e1a2200c5554a06e9c365c34367c
SHA1

7ef646f77674f0936f27c3945a35fef04fd1b195
SHA256

2e97d3427a3037469ae6fd139717baed5358cfe4a93e30ebd2cfc5a9b5dc7807
SHA512

6e117a2eb5b86930f420c78b4a1f366a92aac62a6db0790a27a47f3e6ec34fe4e15642a7d0fcec42207b969cc4e9a9ce3825390c72608008e675a1b03dd99484
SSDEEP

96:axhSqBBxzvD98zNYcjMbnrTbOrbGIQq3js2:DeuYUEvarScs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1845e1a2200c5554a06e9c365c34367c_JaffaCakes118

Files

1845e1a2200c5554a06e9c365c34367c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b73f2c7aea6d071f18b0342a019785cb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord666
DllFunctionCall
ord600
__vbaExceptHandler
ord711
ord607
ProcCallEngine
ord570
ord100

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ