8ad9ad02b1c1efe6053e75e10526da19_JaffaCakes118 | Triage

Sharing

General

Target

8ad9ad02b1c1efe6053e75e10526da19_JaffaCakes118
Size

24KB
MD5

8ad9ad02b1c1efe6053e75e10526da19
SHA1

bb986331c8e2dc5245dbab1c4199202fdf24a43e
SHA256

7f924da22f42905cc1adb9cbf11283f46c78a9dd960311820dee467ebb861c2c
SHA512

b1792acb75f9c678d67bee1f81a66a309fd6e1a4a46340a456f059b3aa20cd323148547897a5ddf52061928874dd3fdad71b5fa2cd331dbacfddc0d56b18fbb3
SSDEEP

192:PpScC3rvFrWvr8QBG2I0YEs3Y9cOBF4VrQnDGwmhTl82zqG:PQPBrkIQG0YNIaQDyZBmG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ad9ad02b1c1efe6053e75e10526da19_JaffaCakes118

Files

8ad9ad02b1c1efe6053e75e10526da19_JaffaCakes118
.exe windows:4 windows x86 arch:x86

74a2f9d1adc29be02797a687aab0bf0a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord621
ord518
ord666
ord595
ord598
ord632
ord529
DllFunctionCall
ord563
ord600
ord601
__vbaExceptHandler
ord711
ord712
ord608
ord716
ord717
ProcCallEngine
ord535
ord644
ord570
ord648
ord578
ord100

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ