b4d54c3e7fe571a1f037ff556cabefa3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4d54c3e7fe571a1f037ff556cabefa3_JaffaCakes118
Size

40KB
MD5

b4d54c3e7fe571a1f037ff556cabefa3
SHA1

36c1a5ca7314a25053c9a39aca59766f6ea1602b
SHA256

dffbd77b4d98f11321614f4cc032eccf06078b25e6c55c5cd154a438371a27ec
SHA512

2135a36374a531900dc357714b1cfcb3f337cc10e1c385761efa8becdcf7fb1c41ac39a2a6d736bd9962c7cad770b425afa221cd099e8ec6203d787c92be9983
SSDEEP

192:Mf0kFcJSHaWBSLXDzWqXSYo+Nn8E/bASbSrjI9uYeWwh4ns6hrJoiKvgmicS:Mf0/T/PWqXho+Nn8e0zI0YJsmForZ7S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4d54c3e7fe571a1f037ff556cabefa3_JaffaCakes118

Files

b4d54c3e7fe571a1f037ff556cabefa3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c85502a2d51b816f4e890a52d30d3a2f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord666
ord595
ord525
DllFunctionCall
ord600
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord570
ord648
ord578
ord100
ord579
ord616

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ