b4b0a00e8e838a22e5e2a837bbe84b3e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4b0a00e8e838a22e5e2a837bbe84b3e_JaffaCakes118
Size

136KB
MD5

b4b0a00e8e838a22e5e2a837bbe84b3e
SHA1

d703be269ea54015525ca42da4dacfdfa2ea1802
SHA256

b0353ce48168a42be13bf253e6d84645e887c5d99986a60573693feaf827865f
SHA512

9f91e745115b4b28c1b5934fdfa15889321aca326da75f34cb9b9ec20ec09d4c4cdaef3c6f35789660206380231a2b4b4c71c63838a291a8ef65d68dc742246a
SSDEEP

3072:URdd1fOZVUVZ2hxYK7D5zdy3+P+kdMAgW1uM:P1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4b0a00e8e838a22e5e2a837bbe84b3e_JaffaCakes118

Files

b4b0a00e8e838a22e5e2a837bbe84b3e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6c6eb55a9df7447b639ad297eaa66913

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord665
ord631
ord632
DllFunctionCall
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord537
ord644
ord100

Sections

.text
Size: 128KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 980B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ