b349c5fd884379b76b6c557835fa94ed_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b349c5fd884379b76b6c557835fa94ed_JaffaCakes118
Size

40KB
MD5

b349c5fd884379b76b6c557835fa94ed
SHA1

6032a869f9c01e3ee5ea8d1bc9d930ada1e5dda3
SHA256

2be3330c8f2fa1d49132a22b8dbd7b1a964523a52e3e538d23ecf5ec16952293
SHA512

7b50c361dd0435479053717d1702266cef941067b68e3aff0abea4d2b19151ccff309d37b6a4860ea6d8c7b294766b7e52cb153a303c7e95e9f1481c47ebe327
SSDEEP

768:BiCftt7AlrkjNAyZJTFg6smuOAK8MlvLxpe:BiC1ZAt8NAyZJmsLe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b349c5fd884379b76b6c557835fa94ed_JaffaCakes118

Files

b349c5fd884379b76b6c557835fa94ed_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2f04877549175dce9a5933237dfabdc3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
ord593
ord594
ord598
ord709
ord632
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord644
ord648
ord578
ord100
ord431
ord616
ord617
ord618

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 988B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ