ebf36c79d17efede7e26941a521a9272_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ebf36c79d17efede7e26941a521a9272_JaffaCakes118
Size

24KB
MD5

ebf36c79d17efede7e26941a521a9272
SHA1

511abe889aaad4b2ecde00d72355400b6c7616c6
SHA256

68444e5b18d52bc695dde77639af71db3a0237f7544e8f3320ecbb45bf86b157
SHA512

1504a372791dee81c31924575f251cee7f1a2d429e20ae87a13cec434a1c0baabb66f66812beb1be5551f7bc6a27652df2a4bf949536da13dc8b9f9b5c55366f
SSDEEP

192:pPa0Hb43PhxTzG2LXkWO7tHGw5nL8aOkmZ0xqTCqLRlvhWTmLuZ+5w3FBT4gScTC:w0Hb8vKE0D7ll8aOkmZqqeorF++Zrn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ebf36c79d17efede7e26941a521a9272_JaffaCakes118

Files

ebf36c79d17efede7e26941a521a9272_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f864a7ce457e6e4d550a2360e3450cec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord593
ord598
ord631
ord632
ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord713
ord607
ord608
ord717
ProcCallEngine
ord537
ord644
ord570
ord681
ord100
ord616
ord581

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ