66ddd06599edea000aae9d763c05993e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

66ddd06599edea000aae9d763c05993e_JaffaCakes118
Size

20KB
MD5

66ddd06599edea000aae9d763c05993e
SHA1

cb22e39bf6da7538d1f58e46a48fbca6b9f801d6
SHA256

fb05dd3eaf12bd3c30704840acef39a631f602599922d95e140119a63780b435
SHA512

234f01411461b22be132361551c536c93349e146513b900aa150fd209a891c739f5921bf17d2431f89ffa9c3e9d2d5ff3dfa55682d1b5aef9ffe169d7f54add4
SSDEEP

96:MSXSqtHyybNRqF7CvBI3pPVNXDjlA0VL8lprZDiL/NsBL3zM2:HXxtqWvBI3pJbYlprBM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66ddd06599edea000aae9d763c05993e_JaffaCakes118

Files

66ddd06599edea000aae9d763c05993e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f4df14a53e24d9044f61832c8aebade7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord632
ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord644
ord570
ord100
ord616

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ