82c02560019d200f8377a4c59c3bc44b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

82c02560019d200f8377a4c59c3bc44b_JaffaCakes118
Size

364KB
MD5

82c02560019d200f8377a4c59c3bc44b
SHA1

e2a2be3eb20b04534b6958840798a44eb9c86ca4
SHA256

94b4f69442719e453ce343bbad5a7e0a3ed865557cb4abb16c44abff2cd7c139
SHA512

46fd8805f702280c2c8765900d1c07d11e853064bb2821945298fbb9f16dc502815b3a5d8cb0d0a89d3643cba658bcd37d2f3df05f3a13af5502bebab073a849
SSDEEP

6144:d3vdiQ1Z1vw1BUvhLYbXFNQ6/DwdHdS86nQ8FNYEpwtGMiw7YXcPqyC3:d8G+1BUvhLYbXjQ6/DE6nQ8FiE6t0VXB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
82c02560019d200f8377a4c59c3bc44b_JaffaCakes118

Files

82c02560019d200f8377a4c59c3bc44b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fbb3724765dfa73afee28cbaabeed113

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord518
ord626
ord666
ord598
ord526
DllFunctionCall
ord563
ord670
ord601
__vbaExceptHandler
ord711
ord712
ord607
ord608
ord717
ProcCallEngine
ord644
ord100
ord616
ord617

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 344KB - Virtual size: 342KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ