7910ee0cedab250650d7efd9e2129f02_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7910ee0cedab250650d7efd9e2129f02_JaffaCakes118
Size

172KB
MD5

7910ee0cedab250650d7efd9e2129f02
SHA1

80c38ce4053764b23b453f19790db7a1368fe652
SHA256

ec5a397a09b57ef2029c359be317180f6ff234c95a3fdf7fc5b2c68ab73f7088
SHA512

2f38bb4eb7ac86215a8cadabf35c96da30dab4da509c7289cacf1664d4368e9e5bba81a50cfac24408e81e79723980c213cd5134e2ae9eedac64b354b84f5ac6
SSDEEP

3072:+VM7CbgBE/Aci24I7gKTNKcPkgMzqAiD3h2:+m9O/AfKZKcazq13

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7910ee0cedab250650d7efd9e2129f02_JaffaCakes118

Files

7910ee0cedab250650d7efd9e2129f02_JaffaCakes118
.exe windows:4 windows x86 arch:x86

63320055dff88dc7e37edbe3e723cd03

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
ord516
ord628
ord631
DllFunctionCall
__vbaExceptHandler
ord712
ord713
ord717
ProcCallEngine
ord644
ord537
ord100
ord616

Sections

.text
Size: 164KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ