a38dcbf796fe4d41e8e699fc6739f2b1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a38dcbf796fe4d41e8e699fc6739f2b1_JaffaCakes118
Size

252KB
MD5

a38dcbf796fe4d41e8e699fc6739f2b1
SHA1

22f6ad054e6d9b03d92e3e35b350001e66a860ce
SHA256

65728696d21139a111f7cb403a785255b710fe776fabe42d472aaecc94fb7813
SHA512

55357ff6f1fb51568cc7c624582d830aa5d1ca12a79bc10e58245e6856f1f46eb547e3d14125e22477b236afa8adaa17a4616c61e5bb6f7fc9e4d39c9b406c69
SSDEEP

384:096kHMZ4H8lqfK3JHdRIH6Y6W576fhr+TZyqZChAalJv4c/NGJnnENACnO2wcFgM:U6kHX6s0z915EOIE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a38dcbf796fe4d41e8e699fc6739f2b1_JaffaCakes118

Files

a38dcbf796fe4d41e8e699fc6739f2b1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a14ce04aeadf6a4d7f9276b911fadd43

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord665
ord631
ord632
DllFunctionCall
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord644
ord537
ord100
ord581

Sections

.text
Size: 244KB - Virtual size: 242KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ