78f5b5a532964c0e6d5af0cad43a5d59_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

78f5b5a532964c0e6d5af0cad43a5d59_JaffaCakes118
Size

56KB
MD5

78f5b5a532964c0e6d5af0cad43a5d59
SHA1

dffbc0e527c95927afdcefdb3652c5196a58806e
SHA256

9212bb15db84cfcf114d1a5d9f56d526e40edd468bac105b7db1aa9661c72e58
SHA512

c4d1719dd2ac517e78a0bd14a7bf96456cd20116071b54fd6833bca01dec79f462bf429dedf8366eb46787d55598c3b0ff4b883642a44a80318bded6592b8190
SSDEEP

768:3r66hLaWaFcrFKB1xxVh25AjYQ+u6xqs4MmPA93DoybfcPj1CI8M:3mO1oBFVPjYe2qs4v49JUP5Cc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78f5b5a532964c0e6d5af0cad43a5d59_JaffaCakes118

Files

78f5b5a532964c0e6d5af0cad43a5d59_JaffaCakes118
.exe windows:4 windows x86 arch:x86

77ed1194d30a4c3a436a9fbceb403fbd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord626
ord519
ord666
ord595
ord525
ord526
ord528
DllFunctionCall
__vbaExceptHandler
ord711
ord606
ord717
ProcCallEngine
ord537
ord644
ord570
ord100
ord616
ord617
ord581

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ