231c2dbcc11f40092a9449a6f7882194_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

231c2dbcc11f40092a9449a6f7882194_JaffaCakes118
Size

652KB
MD5

231c2dbcc11f40092a9449a6f7882194
SHA1

7265e16d74a004b743d6f0b6654764c8a1fe62a1
SHA256

5b26412e2306ee622b0b622cefb15a2fe669cf6ae4cbcd014a15df14f7a63b88
SHA512

b7a9458eabe19cca33833fe46261962873520da37c7f47f826cf1f093ecca177e43188b5b729aa619b750949915bb08897133f89aa790d626799ddb96c0c5f0a
SSDEEP

12288:1qkWA2HPAiefn/WrGoEhLoyuE/oRfuEFxwB6F3fLE:lWrPAiefn/WrGoKLoyuE/oRfuEFxwB6N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
231c2dbcc11f40092a9449a6f7882194_JaffaCakes118

Files

231c2dbcc11f40092a9449a6f7882194_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ce1827ccab045763caff995c126a3b3a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord631
ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord644
ord537
ord578
ord100

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 124KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vDLxI0r
Size: 256KB - Virtual size: 256KB

.Hr0IxLD
Size: 260KB - Virtual size: 256KB