dfbb67db734bcecff81a9fb2e1ee3678_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dfbb67db734bcecff81a9fb2e1ee3678_JaffaCakes118
Size

356KB
MD5

dfbb67db734bcecff81a9fb2e1ee3678
SHA1

d0dee4e722f18c204bf3ca2006b938e86dc2479d
SHA256

9bd846a607bd1246e289ed807495845d58949c2cf230fc5f8ff07f040efdf83e
SHA512

456b9620739e6b3792f1ff697e53f4eb5d481294497b3c55442460a0f39bc276f92499fbd2d076391b4d8d855672692648ef973b02533673c05e865a237eb49f
SSDEEP

3072:IYesVpGYHrTDATITg8gnDARr2HYYqdYk3g/Td4Sk5lv1bsWQqdPQgOMAMeL:TCY1lQqJ+MV0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dfbb67db734bcecff81a9fb2e1ee3678_JaffaCakes118

Files

dfbb67db734bcecff81a9fb2e1ee3678_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4d4cfc29358d62f642e05079187c6900

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord665
ord631
ord632
DllFunctionCall
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord644
ord537
ord681
ord100
ord616
ord581

Sections

.text
Size: 308KB - Virtual size: 305KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ