bcc934bd34596106f3ba0f684399383f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bcc934bd34596106f3ba0f684399383f_JaffaCakes118
Size

130KB
MD5

bcc934bd34596106f3ba0f684399383f
SHA1

214e10b600040b795dddc96293ab2648f4f7962a
SHA256

3dff9301aee3e50f5fa082d5ea32f5f2291421f1831a6ffb296c36c4dea399d7
SHA512

2b2539fcf30295a6bcb392c6fda1c171593574669f185eb30139854e4a88712f7dbda6eedd5661aafd631fd7c4c371959651a9691c13bffc4427d7f59fbee50e
SSDEEP

3072:eTMSUmTmtUfpYHJFgYfEM3l80VRZZ8K30Xrz417OU3kR0if3MGScDtzzGYNmjet:+MS7Tm2OHgGT3a8v8KQrz4BOU3KROwdX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bcc934bd34596106f3ba0f684399383f_JaffaCakes118

Files

bcc934bd34596106f3ba0f684399383f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

adf2972bcf5923b073e636e681892f8c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord666
ord598
ord631
ord632
ord526
ord529
DllFunctionCall
ord600
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord645
ord648
ord570
ord578
ord100
ord617

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ