bc9208414a530e3156bd81d0244201e8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bc9208414a530e3156bd81d0244201e8_JaffaCakes118
Size

36KB
MD5

bc9208414a530e3156bd81d0244201e8
SHA1

3323e52ec3fd7278d16273d4806ad5c852dec537
SHA256

4b06b4d749b25d300b06333aff62c279610b214ef167dfd056f1a49eb644ea92
SHA512

8fed8e2f33ec9dd73ad48d1ec50f0ad6435b74efbb14e292826496322f18c67340a5df3a3a8630baac96d09ea0032d4f325261ee034e48394424c40c0849abe3
SSDEEP

768:QoDIRdWzXvDr5bgemp0ApRba24LRfAM3a20l8D:QoDIObbq0QI2/M35/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc9208414a530e3156bd81d0244201e8_JaffaCakes118

Files

bc9208414a530e3156bd81d0244201e8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5def25be7659688babca3fcfb434a530

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord593
ord594
ord631
ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord607
ord717
ProcCallEngine
ord644
ord570
ord573
ord100
ord616
ord618

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ