b600eb49912562fae5cc8e1fbbe8dd3e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b600eb49912562fae5cc8e1fbbe8dd3e_JaffaCakes118
Size

108KB
MD5

b600eb49912562fae5cc8e1fbbe8dd3e
SHA1

c49db078b4a1191d6201bf3ee7311dac67fff213
SHA256

c6b0513ab604e6e88735917b0e4b122c0292e47954a8ea819687750727e29bb1
SHA512

1936d1fafa75639d820d28e998210720c65f0760d66be110b37463739d67c68f6f4e18579d171a3c83299abaee5b4f5006bb2031c566682e05ef4a99ee4b188e
SSDEEP

3072:q5QZKHe8fAIwgw4lAA1Bh9BhmhllVobtGiNl:8QAHe8fAIwgw4lAAx9BhmroAiH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b600eb49912562fae5cc8e1fbbe8dd3e_JaffaCakes118

Files

b600eb49912562fae5cc8e1fbbe8dd3e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6247240969b34e4e6349dd10e5d3504d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord593
ord595
ord522
ord631
ord632
DllFunctionCall
ord563
__vbaExceptHandler
ord711
ord712
ord608
ord717
ProcCallEngine
ord644
ord570
ord648
ord100
ord617
ord619

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 88KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ