68a6e453bd2a7d57c8ba84bd5726be4b_JaffaCakes118 | Triage

Sharing

General

Target

68a6e453bd2a7d57c8ba84bd5726be4b_JaffaCakes118
Size

24KB
MD5

68a6e453bd2a7d57c8ba84bd5726be4b
SHA1

5c582009a1ffb9a725c1e061f211858ebee290e2
SHA256

fc0519890ecb4c6da2a6a26f2f45474ac450878249a5456d81d73cae172e4a2e
SHA512

d2f4e3a917a54057fa0e35e1542517e4701bd26d72a46c4eea267c3eae9452e0fd89608b4c8fa3fc26f7d188433196f0a184083d135b833c48f356252e4a4089
SSDEEP

192:5JsEu26Xpy31oVz5YzUof0eFtnOfc/fB5IFh6PBAhKzFa5c4hf9D3nus:DVu2EA31oVG1ccnOdFhXhKzFqLTus

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68a6e453bd2a7d57c8ba84bd5726be4b_JaffaCakes118

Files

68a6e453bd2a7d57c8ba84bd5726be4b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3b02499a5f744a0c2db225bcb19a2311

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord709
ord632
ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord712
ord608
ord717
ProcCallEngine
ord644
ord570
ord100
ord616

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ