66d80f6dae5c2ba65e0883012d689855_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

66d80f6dae5c2ba65e0883012d689855_JaffaCakes118
Size

908KB
MD5

66d80f6dae5c2ba65e0883012d689855
SHA1

36c492f1b47ade981eef0ec7b1c2e130786554d8
SHA256

0ff71efd5c3a89f344390967e3c5215168f044b5626e507f2853a21006084c2a
SHA512

731b5f04eacf44256fb12edfcc1097e1c489bf1b898ba8eb4caf8eba3b0798a8153cfabf03a3450bdaee511121127c38e27adf402e402fb7d38558b912aa6478
SSDEEP

12288:u7rGNrkty0fkhAlmvHRVU7rGNrkty0fkhAlmv:uErmyFAeHEErmyFAe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66d80f6dae5c2ba65e0883012d689855_JaffaCakes118

Files

66d80f6dae5c2ba65e0883012d689855_JaffaCakes118
.exe windows:4 windows x86 arch:x86

026e974a7cccba910e874a06b50e80cd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord593
ord598
ord631
ord709
ord525
DllFunctionCall
ord601
__vbaExceptHandler
ord712
ord713
ord607
ord717
ProcCallEngine
ord644
ord570
ord100
ord616

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 872KB - Virtual size: 868KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ