1b3256367456ad589fb0fbf98886997b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b3256367456ad589fb0fbf98886997b_JaffaCakes118
Size

116KB
MD5

1b3256367456ad589fb0fbf98886997b
SHA1

96ae99ca611eecf6a7969d8f17c7c250d7e08589
SHA256

07d6a5c51df45467b9d9fb47a355e8d334921deb67c6dfa25c0901457f58edf8
SHA512

b98aaf55dc9e99e305d7d03360a6f0cb1cf4755bda016faecbeac739f693f2f74e8eff8a99b7e49ff8ff36222c9157bfbf02f333fbe261e4327548f0fd5fd366
SSDEEP

3072:XeKpQpq5mmEfePO+Dk71SEdI6Dq1OUReqFArgfa/4X:Xexe2+Dk71SEdI6Dq1OUReqFAcfa/4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b3256367456ad589fb0fbf98886997b_JaffaCakes118

Files

1b3256367456ad589fb0fbf98886997b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

213b18ccf06c7260bd95da69460244ca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
ord516
ord628
ord598
ord631
DllFunctionCall
ord563
__vbaExceptHandler
ord713
ord717
ProcCallEngine
ord644
ord537
ord100
ord616
ord581

Sections

.text
Size: 108KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ