2636e263b51551673ff48c1239dc613c_JaffaCakes118 | Triage

Sharing

General

Target

2636e263b51551673ff48c1239dc613c_JaffaCakes118
Size

71KB
MD5

2636e263b51551673ff48c1239dc613c
SHA1

0fc3d8d5add6850ea6ee2d409887fe64caf9303c
SHA256

896d57a72355d232649e20f38840f245b81e3a987e7b771f36a747b6e0bc7263
SHA512

e506eb3b5e1482e84c8629d9d3df4bd3544dbf7870e20e70fdc1f2cf9e269abc9e5a5e840d7ee36f765750d37ea0c3280d09dc2cf5a1fb1bf393ebc3a41dcc8d
SSDEEP

1536:z7wgjPLBJlls1iT4/19FXA25mYMGadtdF2xQ:zEUPLBJll8iT4hXAWT0dtOm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2636e263b51551673ff48c1239dc613c_JaffaCakes118

Files

2636e263b51551673ff48c1239dc613c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cd81becf486c9d62d6f95dee4dc59988

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord666
ord526
ord529
DllFunctionCall
__vbaExceptHandler
ord711
ProcCallEngine
ord570
ord648
ord578
ord100

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 956B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ