4782ee350ca2208a959c13f21c257728_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4782ee350ca2208a959c13f21c257728_JaffaCakes118
Size

20KB
MD5

4782ee350ca2208a959c13f21c257728
SHA1

f5cef02062fe4a661bac41676810ef73eae44ba7
SHA256

bd746255d3822dd31f70e6510ff5f4f3713d519537c38855e81d0d27c81f86c4
SHA512

fc413fe2805aea74e2abe00d211d53d0f4e9ffea1d06bd24c510bc84c2f6b13ed0a7eb1a7acccef6f8c73109f85f14f1a65d3e7a3cfea9488275ae098019c7e9
SSDEEP

192:jtSS9V5dwaMkqiY4bxFCZ0XoQ3qqE1lXvTCqLRlvgSI:jtSWRLLqiYsxEZYf3A3eorHI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4782ee350ca2208a959c13f21c257728_JaffaCakes118

Files

4782ee350ca2208a959c13f21c257728_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9a487e8376573c937a503ab9a2929406

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord593
ord598
ord631
ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord713
ord607
ord608
ord717
ProcCallEngine
ord537
ord644
ord570
ord100
ord616

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ