a66eef89f8649bcffd2399c01e4bf8ab_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a66eef89f8649bcffd2399c01e4bf8ab_JaffaCakes118
Size

12KB
MD5

a66eef89f8649bcffd2399c01e4bf8ab
SHA1

a4a1f26fd474befbf48234248618f4a65a95f07c
SHA256

311ad44160cce23aaaa17d18aa086aab752bab5e47e071662b009b34135b74ca
SHA512

062ee40a633a34b939a01a286f2533e8330b2001d91dd56113989df80126d90eb0bb52902272c2be249aae1a6bb3e03c72efd8e9b8ed8ee326759a15db356a11
SSDEEP

96:6daJhCEHgXjsDWjpR5j8xj57SU4l/gD9xy1o2G:9CeceWP8oox

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a66eef89f8649bcffd2399c01e4bf8ab_JaffaCakes118

Files

a66eef89f8649bcffd2399c01e4bf8ab_JaffaCakes118
.exe windows:4 windows x86 arch:x86

94cf0e391871d84658e05e077e45c3a7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord666
ord595
ord520
ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord570
ord100
ord617

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ