bf668900e23fb62cbefcf2fb6fefa1ce_JaffaCakes118 | Triage

Sharing

General

Target

bf668900e23fb62cbefcf2fb6fefa1ce_JaffaCakes118
Size

20KB
MD5

bf668900e23fb62cbefcf2fb6fefa1ce
SHA1

6860d7bb991a1ea68c515375b94e08967e16031e
SHA256

b1bd68b1a33750546866b9767fea3d544ed2faa3100114fcbb41d5d50e6b5e9f
SHA512

8b81ff3810ab856c95c0dc8f3bdb759054143970701e41bc034ca412ca7af1ebb54f80e0bb7c6b11b2eae11ab2d559309c92c40f11dc24ec2729f3b7c33c6fe6
SSDEEP

192:jAljmm1o9T5RiBIUXpKM+vlptJhMYyrBZOgSyGQhBxb28M:jAljh1gRiBImO1MXrXSyGQhB6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf668900e23fb62cbefcf2fb6fefa1ce_JaffaCakes118

Files

bf668900e23fb62cbefcf2fb6fefa1ce_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f4df14a53e24d9044f61832c8aebade7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord632
ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord644
ord570
ord100
ord616

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ