dac15be0a2ab5ef790573c95d3cf550f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dac15be0a2ab5ef790573c95d3cf550f_JaffaCakes118
Size

48KB
MD5

dac15be0a2ab5ef790573c95d3cf550f
SHA1

4a458001f8ef6f6bd0cd05618bb040e2e69076e9
SHA256

a9dfbda9b5bcb2b71e3be38a228fb914dd79a4a0c9740e11c2d0e7b76bd3b2dd
SHA512

ae08eda2868ae0331cba003acecac0d5d8959690821e6ad2f4b6b261b9509391ae33a68590fdd1df608c934b824aec803aeb1baf5bebe34c34711ff2ae2b2b01
SSDEEP

768:wN/3gr/5eWlgvAFhHyg8itI+j2yx1OWXcgO6tNQ/ufl:w2L5Djn8shFHN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dac15be0a2ab5ef790573c95d3cf550f_JaffaCakes118

Files

dac15be0a2ab5ef790573c95d3cf550f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

94e0a306df94af076979b05f96a19865

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord593
ord594
ord631
ord709
ord632
DllFunctionCall
ord600
__vbaExceptHandler
ord712
ord606
ord607
ord608
ord717
ProcCallEngine
ord537
ord570
ord685
ord100
ord616
ord617
ord581

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 724B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ