4589181004685e82cdd97df4ff0684ad_JaffaCakes118 | Triage

Sharing

General

Target

4589181004685e82cdd97df4ff0684ad_JaffaCakes118
Size

76KB
MD5

4589181004685e82cdd97df4ff0684ad
SHA1

2b00eda91e59355a595ac7acc8904699fd280398
SHA256

aef044bc90398633fd2ddb0901b24bd236a71301faf5e7ae26d5e755a9479d09
SHA512

386e5422d8874affd124fc78b981c7c36368efd6b0723938838e8a93644605c61726a08c381987ce70f9340f63f7dafb288e1b3f4d5fc1b37eb9391a11e214da
SSDEEP

384:egR+BTfWUDcT/FJK2nJq9Kdg66lRk0iu5kb6iSiOtpgqTaw0vXhNddkbbO8NND/a:ejw/PJq9xc0iu5kuiQteqG3YO8NDW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4589181004685e82cdd97df4ff0684ad_JaffaCakes118

Files

4589181004685e82cdd97df4ff0684ad_JaffaCakes118
.exe windows:4 windows x86 arch:x86

090e762a1fa1d973428f14173152e372

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
ord593
ord594
ord598
ord631
ord709
ord528
__vbaExceptHandler
ord711
ord714
ord608
ord717
ProcCallEngine
ord537
ord644
ord648
ord578
ord100
ord431
ord616
ord617
ord618

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ