6f74dcf81ab4b9efeab63e3416a7be71_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f74dcf81ab4b9efeab63e3416a7be71_JaffaCakes118
Size

656KB
MD5

6f74dcf81ab4b9efeab63e3416a7be71
SHA1

12ccbb4e1eb176e4468ea99267394294457e08a1
SHA256

e46ff61d6857e212d7903180033bf9464ae34844728eeb169340550272b3d193
SHA512

5f785f1d6dfc94b052ef4e1fb36816a33abc325366a5f02d9656a8e8a151a56fae2b3bf74393942ba16c27099d1f62a15272bcd90bdd793377a0fe01552e63a9
SSDEEP

12288:uJuqbOraV3lbs9EzhTRHw6B+RDM6TZ2gkCRmYL8z9rIPZ4zR:ubqaplbfzhTRHw6B+RoWkCRmYL8z9rWw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f74dcf81ab4b9efeab63e3416a7be71_JaffaCakes118

Files

6f74dcf81ab4b9efeab63e3416a7be71_JaffaCakes118
.exe windows:4 windows x86 arch:x86

449140469a8043584d26de0d694129b5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord631
ord632
DllFunctionCall
ord601
__vbaExceptHandler
ord713
ord607
ord608
ord717
ProcCallEngine
ord537
ord644
ord573
ord100
ord616
ord618
ord581

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 620KB - Virtual size: 617KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ