59aa7f34ce212537c491a0acdaea10e6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

59aa7f34ce212537c491a0acdaea10e6_JaffaCakes118
Size

1.1MB
MD5

59aa7f34ce212537c491a0acdaea10e6
SHA1

e0037ac7d6108ad0441100c09b6d89726a7f5519
SHA256

8742a66d4eda8ca7d2fd301fbd1bdfa385cf9c7ec0f98cfa78ff65d45739797e
SHA512

3ba910c35ecd0f3dec9390195830d2bf5f1dbb827519a9f9a7be4e22c34bc003cbcbcf27fd7afe7e77533f2442d0d693c824ad98455b9fd325402b013f308d3f
SSDEEP

3072:aRGhhFD3t27Avj+G9IR5Le65Mp3cKAArDZz4N9GhbkENEk:/hFbPvjYRVePpxyN90vE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
59aa7f34ce212537c491a0acdaea10e6_JaffaCakes118

Files

59aa7f34ce212537c491a0acdaea10e6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9686c6d153cb6ee4abd23dadcc2091af

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord517
ord626
ord666
ord598
ord631
ord632
ord525
ord526
DllFunctionCall
ord600
__vbaExceptHandler
ord711
ord607
ord608
ord717
ProcCallEngine
ord644
ord570
ord573
ord100
ord579
ord616
ord618

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 136KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ