1906304b9d0e0165244c78ac414637f0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1906304b9d0e0165244c78ac414637f0_JaffaCakes118
Size

65KB
MD5

1906304b9d0e0165244c78ac414637f0
SHA1

b2c9ca49b59872a3e6331c04cf54a3ff57b13256
SHA256

6745b538df82cb72920144d935351036df297702d3bc7bd1d35ab7c9a817b164
SHA512

a8e4e7363e4164212ea491e050bc00851b0bc570ef44a05248d3cbe1d6d8b10367adab3ea2b5cf9557d18fe6312425512bf227dddcbbd82424a9eb39efdcbe6b
SSDEEP

768:z2l5pDHD3X1+ljFXfqtD+fXfEuOUcYz4RYOKMD6irpcaotf/kL4yLPc3:ICjlfqtD+fXsuc+Y6Mu04B3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1906304b9d0e0165244c78ac414637f0_JaffaCakes118

Files

1906304b9d0e0165244c78ac414637f0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

eea68466364f6780edb4990dc47e3fae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord666
ord667
ord598
ord631
ord632
ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord607
ord608
ord717
ProcCallEngine
ord644
ord645
ord570
ord573
ord576
ord100
ord616
ord618

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ