b7cb37b607b46c3ec92a83fae137dcca_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b7cb37b607b46c3ec92a83fae137dcca_JaffaCakes118
Size

179KB
MD5

b7cb37b607b46c3ec92a83fae137dcca
SHA1

710c7623bd74cc88e1af9d2a097abd8cd86f646c
SHA256

d2c14133a457189bf117a16fb83f05bc28b76ef7baad7975a066268ba3049cd3
SHA512

8ef371ee68c13e742028ca43ecd29633524e024c5fbb048dc8e43d091f5c0d5de7da425a1de9a0477f00cc0d1c4dd0c03c30a11121ec6de5d8b5a04f24dad575
SSDEEP

3072:DA9NORcs5rtGcgrSVKxnIvpU8T4eDvkg2oX+5cAJo8l97Yz+I3Vi4BJuKU:8+r8cgrSVKxICk4Foy51YRDU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b7cb37b607b46c3ec92a83fae137dcca_JaffaCakes118

Files

b7cb37b607b46c3ec92a83fae137dcca_JaffaCakes118
.exe windows:5 windows x86 arch:x86

37dee9164fd40a91e20f4472e289cdf9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord621
ord516
ord519
ord666
ord595
ord598
ord631
ord526
DllFunctionCall
ord563
ord600
ord601
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord536
ord644
ord537
ord648
ord572
ord681
ord578
ord685
ord100
ord616
ord617
ord581

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 844B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ