c12b50c11bd10aaa61bee2ed848b1bda_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c12b50c11bd10aaa61bee2ed848b1bda_JaffaCakes118
Size

52KB
MD5

c12b50c11bd10aaa61bee2ed848b1bda
SHA1

b3326727268666ba309d3f3700e764aae1be5425
SHA256

3e58149b1cf915f13a9dda34b334647f095cec26643fef04ff158c8da860925b
SHA512

99ee9316fc1605e32289f5a1b0cf7559f05d0b7ddac395c52f1fa474e85e986e370148829d2ff3364357815458fe2e6772f64e49bda839cbc67bd4258704a551
SSDEEP

768:aLOrBdn4E/lL6z1Y2EjgjMdYFKn+cquqfYa5s9HZtDf3Yt:vrdL6ZmMK+XumS95tDf3Yt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c12b50c11bd10aaa61bee2ed848b1bda_JaffaCakes118

Files

c12b50c11bd10aaa61bee2ed848b1bda_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f7333c64fa40d9a4dddd53b392df7620

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord518
ord519
ord660
ord593
ord594
ord595
ord598
ord522
ord709
ord631
ord525
ord632
ord528
DllFunctionCall
ord601
__vbaExceptHandler
ord710
ord711
ord712
ord606
ord607
ord608
ord717
ProcCallEngine
ord644
ord537
ord681
ord685
ord100
ord613
ord616
ord617
ord618
ord619

Sections

.text
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 308B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ