d352ab573b61625db349d4a8a01b8e62_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d352ab573b61625db349d4a8a01b8e62_JaffaCakes118
Size

49KB
MD5

d352ab573b61625db349d4a8a01b8e62
SHA1

6741b3074bba6abd9336e8810f385b716fdbe60f
SHA256

d0f4daec943c03ee585d81df793452e67e08f8bb2f493bdb9cf1ef17c2654dfa
SHA512

6b6e9959874ff1d51bf116dbadb5f9301a41782ff172148d73653436418b542bc63c92db6e0f54a40c15f98fd6d7770037e6a77e558a743e2c9ba3bae31c4e1e
SSDEEP

768:mM39SB/Y9uK1HTikicBdzkiPXBqjdC1lz1V5JeSXnbZmjIYJ0XU8:mM3MpEuO2kRBiGXBLz1V+SwjIYO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d352ab573b61625db349d4a8a01b8e62_JaffaCakes118

Files

d352ab573b61625db349d4a8a01b8e62_JaffaCakes118
.exe windows:4 windows x86 arch:x86

27bc381bd8908da74868be7861d263cf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord666
ord593
ord594
ord598
ord631
DllFunctionCall
__vbaExceptHandler
ord607
ord608
ord717
ProcCallEngine
ord537
ord644
ord573
ord100
ord616
ord618

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 828B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ