a53585f1bfb72d3f0e6b40155abc72ec_JaffaCakes118 | Triage

Sharing

General

Target

a53585f1bfb72d3f0e6b40155abc72ec_JaffaCakes118
Size

460KB
MD5

a53585f1bfb72d3f0e6b40155abc72ec
SHA1

08ec519558bb13aaae174dcc311d9d3bedfab483
SHA256

08a7069872032849f0bbc3842e782a4567c8f7869e3634bd5ca25f43e1cadca8
SHA512

c6fe302592d6b780c42c83ede3175cf8edc35fdf8db8ae8478c1d2610e9c89b0905b5e6476647bd4b096655f5e8cb1db09feb036602f06ecc11bd0eb54dc23cf
SSDEEP

12288:5hYwRYTHQACYk7ce+n7pQR9dtSamzHT7q6U:nn3ACZf+n7qzSamzHy6U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a53585f1bfb72d3f0e6b40155abc72ec_JaffaCakes118

Files

a53585f1bfb72d3f0e6b40155abc72ec_JaffaCakes118
.exe windows:4 windows x86 arch:x86

531382f810b9ee66d877092fcf8151bb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord632
ord526
DllFunctionCall
__vbaExceptHandler
ord712
ProcCallEngine
ord644
ord100
BASIC_CLASS_AddRef

Sections

.text
Size: 88KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 368KB - Virtual size: 365KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ