bc5f31dffcd874a232ed7e66ab4eb230_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bc5f31dffcd874a232ed7e66ab4eb230_JaffaCakes118
Size

44KB
MD5

bc5f31dffcd874a232ed7e66ab4eb230
SHA1

7dcea95c985962f14dfe61af69a83c1d6ae35444
SHA256

b894f681d4b034e88cb73db020c3acd5c65c95d7fe91e7f9987b41f418e0152a
SHA512

c92dcad59a0c1254b7c5ee19da08123a9730aa1b6bd76d52328aaf392377124a2ba17f1bf9213e458a8ea11b0dabd4963fd834a05207db2f1731f296e4aa0ddf
SSDEEP

768:AuzmmyQXGFvfmeV/YOt407agbqIQu9Q7+HM/0V:Agmm9GRmeJtnTqIQu9Q7+HMU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc5f31dffcd874a232ed7e66ab4eb230_JaffaCakes118

Files

bc5f31dffcd874a232ed7e66ab4eb230_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3357376d2e8aa399485e5d9e5db8a13d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord582
ord583
ord584
ord516
ord660
ord593
ord520
ord632
DllFunctionCall
ord601
__vbaExceptHandler
ord606
ord608
ord716
ProcCallEngine
ord535
ord644
ord572
ord573
ord575
ord100
ord617
ord546
ord581

Sections

.text
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ