aaf1bd83d54c4833ce6c4ee919cdf4f4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aaf1bd83d54c4833ce6c4ee919cdf4f4_JaffaCakes118
Size

1.1MB
MD5

aaf1bd83d54c4833ce6c4ee919cdf4f4
SHA1

c250bdb7e1a4dc3db6e0b7c516f24310dad795b8
SHA256

df82b3c0aa9ca0571d00f6c8221c0d801fdfc2afc68cadf3c8181e266469fa40
SHA512

f925dd5339a2aa7135a6ea23317ae7490152d425e4f913dbb82f392c47c0b3cece7aa66cdfd6f6319a96e45ba070d773cf328730fb71b342efeb4de043d387b0
SSDEEP

24576:h318fJdziVDeov4Yp0mByzwiuw4OlgI67dsw0NNwxViwGNk4Xx:V18fJ8VijYp0kYF+9dMipAx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aaf1bd83d54c4833ce6c4ee919cdf4f4_JaffaCakes118

Files

aaf1bd83d54c4833ce6c4ee919cdf4f4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6509d7cc19f6ff05a41a31ec94355b05

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord518
ord666
ord595
ord525
ord526
ord528
DllFunctionCall
ord600
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord570
ord576
ord100
ord616

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.1MB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ