33e158fda6e207dbb7c60dee5eb6fe64_JaffaCakes118 | Triage

Sharing

General

Target

33e158fda6e207dbb7c60dee5eb6fe64_JaffaCakes118
Size

168KB
MD5

33e158fda6e207dbb7c60dee5eb6fe64
SHA1

5200483c6340a9d5981d6aad898d8987b19d7d56
SHA256

c9727f4f1b74cd9bd1485a5c9849305cf74f79cac9c5d27b708ea503e4e285b9
SHA512

c3bd94ec6b71cdc285023871c628031dca19b84aa2075e6bc5c19c18757d0583efc7968d8c72f0a155e5512909e88d9fddcbad1af1ae139002bcf2ee3ae93f50
SSDEEP

3072:VQB0z1bPTpy7+1j0euYX1fbQjfl8XFGTs/eY9MineYW0mnuimqMR:Vr1bPn1xuYX1fs98XFGTs/7tmuXR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
33e158fda6e207dbb7c60dee5eb6fe64_JaffaCakes118

Files

33e158fda6e207dbb7c60dee5eb6fe64_JaffaCakes118
.exe windows:4 windows x86 arch:x86

40b3e370014b1deb8026edd1f10d2f74

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord593
ord594
ord631
ord709
ord632
DllFunctionCall
ord600
__vbaExceptHandler
ord712
ord606
ord607
ord608
ord717
ProcCallEngine
ord537
ord570
ord685
ord100
ord616
ord617

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 724B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ