64617a750401cb2eed0bf15a6d9ab9cb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

64617a750401cb2eed0bf15a6d9ab9cb_JaffaCakes118
Size

20KB
MD5

64617a750401cb2eed0bf15a6d9ab9cb
SHA1

661656f3ca7d3208c500588bd6b5eb869836f264
SHA256

eaae8b5543db28dffc3ded7094b7c7f13cc50c4384bfd9f8999c2497d755e2d8
SHA512

c528239593140096a277f6fcfd83fc3d1834f7da9ecbd44ec5d14c85db59df2de9816fd9eb9ee3cdd5bd85b6ab160a92ef233581a8372f276753fdf877a42e87
SSDEEP

192:9gXpTgbBcD/PYlQGDXXTmX1U+XXJtXXlCcJYX4R4l8ESmS:9g2bBcrUDXXCXrXXjXXwc/RGw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64617a750401cb2eed0bf15a6d9ab9cb_JaffaCakes118

Files

64617a750401cb2eed0bf15a6d9ab9cb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c9af5542cd95dc3e98329e5f1b549371

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord631
ord632
ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord537
ord570
ord681
ord100

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 996B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ