257f259093deaf1bf40b030cb870d04d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

257f259093deaf1bf40b030cb870d04d_JaffaCakes118
Size

32KB
MD5

257f259093deaf1bf40b030cb870d04d
SHA1

89734c219f3850cc4c3f88cbae85dc108aa6c790
SHA256

0648068345ae0f3104f00248eb8cff09874cd85ec7a3ef96405ee5eab8b0d3d1
SHA512

a3f213a57e1dbc1417fe0ba35afd8a93dd54233cb8a6318be9195fafd6c6fc0f9c329e65cbba3f1f222d6e494cb01d2022e6793264131b44ee2d6c09cce6bf5d
SSDEEP

192:syn4Ggw0+gLhEMlKk+fZlNcuLaaN8nncnnncnnncnnncnnncnnncnnncnnncnnn4:t4GV58EMlKDyqHAyUUBOPj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
257f259093deaf1bf40b030cb870d04d_JaffaCakes118

Files

257f259093deaf1bf40b030cb870d04d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8b377ce2596878ff0aec85b7dbfabdd9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CallWindowProcA

kernel32

GetProcAddress
LoadLibraryA

msvbvm60

DllFunctionCall
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord100
ord616

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ