605cab543bd782b9b06572c1a78c08df_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

605cab543bd782b9b06572c1a78c08df_JaffaCakes118
Size

16KB
MD5

605cab543bd782b9b06572c1a78c08df
SHA1

7f5524f208c4c3d4520b227cf4c17743f69271e1
SHA256

e6a496d9f4d3098f1e6c7510cba431c9b6f059d1ece77a1f760cce5fbf6302b5
SHA512

eac9e48b12fd91a22c40459a2589d30d64220f30c807b2bfea12ac1797a3a70d0cbae5c8d43445714a5f6ccbb17cfdf11b1d46452a841cfe38f9deef20d9508b
SSDEEP

96:EaI74R/YfweRuV1kuVFmEzisDxZoeZjSsZtrIn/DdQDC:27PvuV1bX5xZJVYnJQDC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
605cab543bd782b9b06572c1a78c08df_JaffaCakes118

Files

605cab543bd782b9b06572c1a78c08df_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ae412ed9d50f0e004aa5f90efbfe72df

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord666
ord667
DllFunctionCall
ord600
__vbaExceptHandler
ord711
ord607
ProcCallEngine
ord570
ord681
ord100

Sections

.
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 844B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 4KB - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ