a8cee020dda97944bbaa59117aa6a7d2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a8cee020dda97944bbaa59117aa6a7d2_JaffaCakes118
Size

16KB
MD5

a8cee020dda97944bbaa59117aa6a7d2
SHA1

a9a257b93e0c23acf231215223b3ee81da1bd2de
SHA256

35b989b541c8a488e41c40fdbd19c29f475b7e4d6bbe1d8a6836f63ae89186fd
SHA512

fe3ff9b99e9157594927b2da14d73d3ed21fc3046915f562d6baaf8e9556326ad8d65f1f92f8f01f30070f24beba78ab1c21daa9167e7842ae5b02baa84cb4a6
SSDEEP

192:GgBgUROvZHgg3gP+cUd0k6+jB8rc9LbFUcizBORB:GqgU83iE53B8rcD20RB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a8cee020dda97944bbaa59117aa6a7d2_JaffaCakes118

Files

a8cee020dda97944bbaa59117aa6a7d2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a6b2c3af1525e4e736c2d22fd72f1424

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord667
ord595
ord526
DllFunctionCall
ord601
__vbaExceptHandler
ord711
ord606
ProcCallEngine
ord570
ord648
ord578
ord100
ord616
ord619

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ