c04a725e8fbbf33f609bd18dda6f981d_JaffaCakes118 | Triage

Sharing

General

Target

c04a725e8fbbf33f609bd18dda6f981d_JaffaCakes118
Size

28KB
MD5

c04a725e8fbbf33f609bd18dda6f981d
SHA1

00ce798d2dc2d3be3c0ca2ce55193d510d3dc6e8
SHA256

d15d80ec9da6ae707a120ac601e34fc25690e1f7fda56abe0809ff6beffde3d7
SHA512

a529285b5b108c474f7314af70683dd16c6cdbac96e3ec72cbcd6e08601fcc088b1d3f08f533a52ada568836f4d2229bb052b0dd68dcb0a18ead39a9d243d744
SSDEEP

384:LtuxYSnNXt5DZOzU45lCsEEcuQp1JswdHpkhp:5OXqzUYI441JswdHpkh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c04a725e8fbbf33f609bd18dda6f981d_JaffaCakes118

Files

c04a725e8fbbf33f609bd18dda6f981d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6287b3d74580625bcaadf1ff4e0968c4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord593
ord598
ord526
DllFunctionCall
ord601
__vbaExceptHandler
ord711
ord713
ord607
ord608
ord717
ProcCallEngine
ord537
ord644
ord570
ord100
ord616

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ