f00e8cc47c88ced26cfea3c6786c19b5_JaffaCakes118 | Triage

Sharing

General

Target

f00e8cc47c88ced26cfea3c6786c19b5_JaffaCakes118
Size

160KB
MD5

f00e8cc47c88ced26cfea3c6786c19b5
SHA1

1c8e02d7594d85bd345b2f7f724ede55b41757d6
SHA256

5296852e4a05903693d7910b106502599ded6055700d43ced432f4ca5cd66119
SHA512

3bfba13317212b3eff05d034958c6f2361090168952d47c9d323681986b09a87e3081a3726ec93dfffed95be5ca4bd0831763b99c5b21c3afb6a00fdca1e13b9
SSDEEP

3072:cXppSLtEg57LUK2MVoDOI/Eu7CRQVyB/GOk:c58LtT5kzMV8CuuRQVyB/G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f00e8cc47c88ced26cfea3c6786c19b5_JaffaCakes118

Files

f00e8cc47c88ced26cfea3c6786c19b5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b103e0582bc2168ee8b3aeea7f628360

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
ord516
ord628
ord631
DllFunctionCall
ord563
__vbaExceptHandler
ord713
ord717
ProcCallEngine
ord644
ord537
ord100

Sections

.text
Size: 152KB - Virtual size: 150KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ