f263a1ad9bd2b07595f15e35ca17e5ac_JaffaCakes118 | Triage

Sharing

General

Target

f263a1ad9bd2b07595f15e35ca17e5ac_JaffaCakes118
Size

73KB
MD5

f263a1ad9bd2b07595f15e35ca17e5ac
SHA1

2b4543370b498a631095c4320330c58fd3129dcf
SHA256

1f4b237250617906b5123ccdc45c7d43b8032e6d4f8cd3319841d3b194f8ddb2
SHA512

0a89f0e3793bf944dcf3512706c0cc40b474a3ed11f507eefb18cbe3980588b1b5a9685cf8a8baf8a95a32c903425243b3ee88ea523daa1d497686cec9480a42
SSDEEP

1536:wPiVWnN2lvZYd1T6AQ3J4mbYkazDX68V1xu/bFoaICqArP:ET6Bf9abibFPICqAD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f263a1ad9bd2b07595f15e35ca17e5ac_JaffaCakes118

Files

f263a1ad9bd2b07595f15e35ca17e5ac_JaffaCakes118
.exe windows:4 windows x86 arch:x86

aef5784c2d979114fb42c942b0bfa6c9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord626
ord632
ord526
DllFunctionCall
ord670
__vbaExceptHandler
ord712
ord608
ord717
ProcCallEngine
ord644
ord570
ord100
ord616
ord617
ord581

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ