71a7f95e067ba9c40c20dde04926b5c2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

71a7f95e067ba9c40c20dde04926b5c2_JaffaCakes118
Size

66KB
MD5

71a7f95e067ba9c40c20dde04926b5c2
SHA1

10d033e4e7ee619695270e9dc0f9ffdcb37fa7fb
SHA256

889b0f926d0ad532cc2149c91a1bbd141c83539118273554b2b35bf93d6d6bdd
SHA512

a5206e8e2d368a7cd605baef3b378f161ea0f992f9b7f9ca78e3060c7757be6201504c5ad61b5d7517eead6456aa0a73d2ccc8ee3ce214f5819fff5786caa00d
SSDEEP

1536:D2ocds19VWLUEK4SKlwlfKl0OL+J1ooJK52hKdU4:6G19sLjUywIudsoJKkhKdU4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
71a7f95e067ba9c40c20dde04926b5c2_JaffaCakes118

Files

71a7f95e067ba9c40c20dde04926b5c2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dc8de2ab3b2c3e53ac3352ab9b35a83a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord598
ord631
ord632
ord526
ord529
DllFunctionCall
ord600
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord645
ord648
ord570
ord578
ord100
ord617

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ