1c44660ce1cb7f1e434900068e470610_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1c44660ce1cb7f1e434900068e470610_JaffaCakes118
Size

144KB
MD5

1c44660ce1cb7f1e434900068e470610
SHA1

b28f7c1f5fcccdd4c00f2b780a07196af5f28f95
SHA256

06ab592d92203bc286a15dedd52e55a2698dd3b40a58db6e0c31d51ba6f3be5e
SHA512

438c0ed2e68a59801ba0c9511f8e1ff1de03bcbde3d7da527a4fd8e98301cf51f04fec62fdd0d8ea3507759f7329631ba829ed7901ddcf92501c4350c11763b9
SSDEEP

1536:3OHjZustHRJNVbL76Duk2bL4BqUPTAosBaMSDecIJ8A3zUYs3nN:3uZJkybL4rAosd6A3zUvN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c44660ce1cb7f1e434900068e470610_JaffaCakes118

Files

1c44660ce1cb7f1e434900068e470610_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9b0e38dc62fb7fde244111ae3bafcc52

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord667
ord595
ord631
ord525
ord528
DllFunctionCall
ord600
__vbaExceptHandler
ord606
ord607
ord608
ord717
ProcCallEngine
ord644
ord537
ord645
ord648
ord681
ord100
ord616
ord580
ord581

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 128KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ