7878244b501832646cea0be4978055a2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7878244b501832646cea0be4978055a2_JaffaCakes118
Size

20KB
MD5

7878244b501832646cea0be4978055a2
SHA1

40a580a66653b2ce6de0d49d7b77633b3da01df7
SHA256

c6845055ff04e40a881b3ab871a22097d5de6bdd55a6c00d4654efb440c61c6c
SHA512

d92fa45d01148f993aebd156ab2b11d4bc0b7c8a61e3613a20253668a8f52adecc1a9c33f42cea4bccb3f39308fc587fa5a1de6f25902d75aee7d59f00a0808d
SSDEEP

192:sogEDvotJub6VMNP5nu/HZ0GjTCqLRlvJu3rUSCwh6j8i:s4oq+HPZ9jeorQww6Qi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7878244b501832646cea0be4978055a2_JaffaCakes118

Files

7878244b501832646cea0be4978055a2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bcd77d33a4e1cee55f2c124644881305

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord593
ord598
ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord713
ord607
ord608
ord717
ProcCallEngine
ord644
ord570
ord100
ord616

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ