68a9c474d7c409dc98eb720a8d049d26_JaffaCakes118 | Triage

Sharing

General

Target

68a9c474d7c409dc98eb720a8d049d26_JaffaCakes118
Size

500KB
MD5

68a9c474d7c409dc98eb720a8d049d26
SHA1

4aff503f3e3a46ba1ff168e89ee2da1866bb0883
SHA256

bbd5ff4d1ccf12f7d8188d88e49f5a6ece14d5912017d3ce8c7df2d0773df125
SHA512

0e6a9f4a2e312d915a132572f23bde5c92b1c264428d6e5a61f75fbe8ccdbf29263f0708f2374d2900c5eada0d3e475519845c2b57fe88df3128285ced07690b
SSDEEP

12288:t8gnJwKgWybvjhdaks5j0MLCzITNJdg4NKmXrlR:HgW+FdakKj0Mdhggf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68a9c474d7c409dc98eb720a8d049d26_JaffaCakes118

Files

68a9c474d7c409dc98eb720a8d049d26_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0b14b1474600d89227c74007163e41d0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

expsrv

DllFunctionCall

msvbvm60

ord631
ord526
DllFunctionCall
__vbaExceptHandler
ord712
ProcCallEngine
ord644
ord100
BASIC_CLASS_AddRef

Sections

.text
Size: 128KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 368KB - Virtual size: 367KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ