841f611324a0c396790569d53307e7b4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

841f611324a0c396790569d53307e7b4_JaffaCakes118
Size

180KB
MD5

841f611324a0c396790569d53307e7b4
SHA1

a01c0af197c751b239b014dba0cf42c4f9db9804
SHA256

2fe8c706f73460d2f74e4c54c7ccc6befb441a5707528689efc8436fec7c9e3d
SHA512

a7599decf0d59122a6db02c646c71883f60d7322279245e334e3b3994aecd8406ff59b5972e94e2f6942a281d04630ef6892be8ca7c7beb7ede74387154b9c93
SSDEEP

3072:vJVZI3FMjN0WcHXZhaYv9ytYI8l6cc34kHzCZbfXjvmuXw:HZymtcofYau

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
841f611324a0c396790569d53307e7b4_JaffaCakes118

Files

841f611324a0c396790569d53307e7b4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1a55d8af1bdb646c1d7592c165e5ccb4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
ord516
ord628
ord631
DllFunctionCall
ord563
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord537
ord100

Sections

.text
Size: 172KB - Virtual size: 169KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ