da0c5ec7a6f93f90b3d70caed96fec1b_JaffaCakes118 | Triage

Sharing

General

Target

da0c5ec7a6f93f90b3d70caed96fec1b_JaffaCakes118
Size

92KB
MD5

da0c5ec7a6f93f90b3d70caed96fec1b
SHA1

2725117966ec44c62963698799b0233afd7f372f
SHA256

2914804c6b99df5d68f09462fd84a42592827f82beb5c0bd75c5d7ec111e36fb
SHA512

86cb6929dda16e4f51d0656cb6f27fa0e25d284c43e1bd7fe8f728ecc496d16be357c594e8bca78b0ed04aae7a1a4079382f66432ee7962a1594584cfff1a4a1
SSDEEP

1536:gAk3tmFRtf3u7nD1oNGLQ2cOkpSjmvSMzLYbM:Z0Of+zumQ2ci6vSNbM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
da0c5ec7a6f93f90b3d70caed96fec1b_JaffaCakes118

Files

da0c5ec7a6f93f90b3d70caed96fec1b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

43d06c7356c9e8f160f2724f5afa58a5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord621
ord516
ord626
ord595
ord598
ord631
ord632
DllFunctionCall
ord601
__vbaExceptHandler
ord713
ord608
ord716
ord717
ProcCallEngine
ord537
ord644
ord570
ord681
ord685
ord100
ord616
ord581

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ