5c5aa2a9b349d4146f02fd053b522b99_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c5aa2a9b349d4146f02fd053b522b99_JaffaCakes118
Size

52KB
MD5

5c5aa2a9b349d4146f02fd053b522b99
SHA1

1c5d13e8509f22fbde443a10a1c524ad2a172d3a
SHA256

a66203c3bb70ec2533b4b38d169233ef3a6f5ed83b2be7e59ac2550b476f342b
SHA512

2103b76bbb440e34c380d288754bd6558f761d7b6fbe11f9d78a09aa93d2aa0b5f7ac30e266c1974381802ef8386bea9428c368ba7bbe2c383017ba770b51566
SSDEEP

384:jrgXCnLfN0NvpQbKmaQauLc1fVqGTGuKCpzpfFhfF0fFLfFGHCbexiprf5kE5fV+:jrgXCnLfViVcOJ43XKsPvc0AZZJ2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c5aa2a9b349d4146f02fd053b522b99_JaffaCakes118

Files

5c5aa2a9b349d4146f02fd053b522b99_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dc9ab1a15fd3d7fdcc683aacd3d0ecc0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord621
ord516
ord593
ord631
DllFunctionCall
ord601
__vbaExceptHandler
ord712
ord607
ord717
ProcCallEngine
ord644
ord537
ord570
ord572
ord100
ord618

Sections

.text
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ