2c77e6d3605bf25cb719a3bf0f5c7b59_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c77e6d3605bf25cb719a3bf0f5c7b59_JaffaCakes118
Size

84KB
MD5

2c77e6d3605bf25cb719a3bf0f5c7b59
SHA1

02f64838d1b0668a70dcc6c0063895aa3a7cff23
SHA256

8e19dbc4090ae710c059a9bae3c7968b81381fe0ec0c7ce2cf11484067a5c6e1
SHA512

c7804d7d0c34ed37c263fc3f71fc59f32a15a726e5b889099f8df89063502dc2609a13db7465810016b95158eb807516c18884d60a7f6c8e85fb29b878e0f117
SSDEEP

1536:OQwF4wsS+39YE13E+Lx+cP5eIFpjyQqulXSrs/h6ey1JQJeLB:WqwsS+39d0A+cP5jrjjw2zAmJet

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c77e6d3605bf25cb719a3bf0f5c7b59_JaffaCakes118

Files

2c77e6d3605bf25cb719a3bf0f5c7b59_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d4d4236dcd6ba88bfd572dd87e6c4348

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

DllFunctionCall
ord601
__vbaExceptHandler
ord712
ord607
ord608
ord717
ProcCallEngine
ord645
ord570
ord648
ord100
ord616
ord617
ord619

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ