766c197fda27a0f02e7e5adf3d87dd8a_JaffaCakes118 | Triage

Sharing

General

Target

766c197fda27a0f02e7e5adf3d87dd8a_JaffaCakes118
Size

49KB
MD5

766c197fda27a0f02e7e5adf3d87dd8a
SHA1

e8770ce996c28f300766be8e8edf43c4265d7df7
SHA256

27ad38458c51386cd6351d50c3f7c3b7826ae0e8f9faf978a0934f7963a73c20
SHA512

d77b2b737e7a005be5f374bc39b45d9ee2a5f7ab15567275ef54d4822dfa197c24a97d35163380b557815fb2f856c19401938b2a9b5684f665a10805dc0b9ec1
SSDEEP

768:x1w5tIh7wtwtIcC3pA1qR8AIZlBxLPsWq7hplu8sCKCkp2tuKw2TAeV77eOWU:xmI1wOtBZqR8JLPIp89ChuKnpV77eO/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
766c197fda27a0f02e7e5adf3d87dd8a_JaffaCakes118

Files

766c197fda27a0f02e7e5adf3d87dd8a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e39d037acde6b096f84bdccfceac0cd4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord666
ord595
ord631
ord526
DllFunctionCall
ord601
__vbaExceptHandler
ord711
ord606
ord717
ProcCallEngine
ord644
ord537
ord578
ord100

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ