30516209aafb00cd92b4ff16ab19235e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30516209aafb00cd92b4ff16ab19235e_JaffaCakes118
Size

60KB
MD5

30516209aafb00cd92b4ff16ab19235e
SHA1

2c97a5b7af478a91512d074c3be44946a7622fb4
SHA256

16120961dbd5c1ed4d30dec8c99348f2b265472d212153d1c7086ee0065e6650
SHA512

c0ff70bfa99f6e99420b14fba98748f8f0d0d396d5bf689249f9c7d61f68c27b8eb49b4c6c944452cf1dc0ee458dfa25918a0bf78e49d5569b66bad75192e9e9
SSDEEP

768:YFG1K/IAy7pF0On7lXXYYqqRht1P+VVO+FL1Q:YFGEOddqEht1P+VQ81Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30516209aafb00cd92b4ff16ab19235e_JaffaCakes118

Files

30516209aafb00cd92b4ff16ab19235e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bb3d507481db384d582dd7a22a232551

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord518
ord666
ord595
ord525
ord528
DllFunctionCall
__vbaExceptHandler
ord711
ord712
ord717
ProcCallEngine
ord648
ord685
ord100
ord616

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 964B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ