ba9f566d3b080f00a144a6f136ca0861_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ba9f566d3b080f00a144a6f136ca0861_JaffaCakes118
Size

16KB
MD5

ba9f566d3b080f00a144a6f136ca0861
SHA1

da759d0d0e8482fbba1626f32f91d3e5f76c65ab
SHA256

d74ebf8e4fe1ef92517ad5d7895b23f65b09ad801a04ed3dd1f8d6d3b21ddaf1
SHA512

03168f1d1991e72a71392587f9eb14586c1e8e97fceaaf67056e6050c2d3e04f911935a53e8314446670ecc7ca6fcd3397f9f5e3fffe756358d72689bdecae78
SSDEEP

96:maEmn0zcvYfweROmCUisDxZoeZjSsZtrIn/DdQNC:400NvOgxZJVYnJQNC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba9f566d3b080f00a144a6f136ca0861_JaffaCakes118

Files

ba9f566d3b080f00a144a6f136ca0861_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ae412ed9d50f0e004aa5f90efbfe72df

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord666
ord667
DllFunctionCall
ord600
__vbaExceptHandler
ord711
ord607
ProcCallEngine
ord570
ord681
ord100

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 844B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ