d61c9ad01be081b9aa720092fad2e4bc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d61c9ad01be081b9aa720092fad2e4bc_JaffaCakes118
Size

381KB
MD5

d61c9ad01be081b9aa720092fad2e4bc
SHA1

1051598192e6761a322fdaecbbbdf3a21075f8d2
SHA256

1143bb341d26ba270ffdf10028e6b8145b0d5247a31ff9d7f95eb0d2ec60042f
SHA512

d0effa56ffb7a054eeae59e470ccb49795c2437ed3ff0934c37efeb669e435857d018fcc079076ce0ed02eee11b62f91e700bb28c27b373847629f4b8dff09a9
SSDEEP

6144:FZRqyCNiYHPTyCTVoUmRfhOUmGZxsmcCzuGfuUKp4:RqyqiFCB+JOUmURzu+uT4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d61c9ad01be081b9aa720092fad2e4bc_JaffaCakes118

Files

d61c9ad01be081b9aa720092fad2e4bc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3a90b3536f1baa7d8548623bcfdc7402

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord553
ord667
ord593
ord594
ord595
ord631
ord526
ord529
DllFunctionCall
ord601
__vbaExceptHandler
ord711
ord606
ProcCallEngine
ord538
ord539
ord570
ord648
ord578
ord100
ord616
ord619
ord542
ord543
ord544
ord545
ord547

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 365KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ