f68025dd0eafae1e2652bc61684731e8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f68025dd0eafae1e2652bc61684731e8_JaffaCakes118
Size

68KB
MD5

f68025dd0eafae1e2652bc61684731e8
SHA1

ea1bfcb8cca881185d4e9add5a8b9b77ee1a4616
SHA256

0938f7c58a76080ba065490a6e357df3325e05aeb601355060d8f67a76da7481
SHA512

40e3a2b3acd17d35bc0ca49a51425d0751ed0b127a5d427839242aa82d157e31b5a71568642dda65376dd6b4fbbc16ccdd002b26bc7a2a03db34896f3d6904ee
SSDEEP

768:VvkuchnndZQefxpeMwd1Jg5YSwWLBPJpXSKgLBPJpXj:5kuc1ndZQefYlg5VwWVBpXSKgVBpXj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f68025dd0eafae1e2652bc61684731e8_JaffaCakes118

Files

f68025dd0eafae1e2652bc61684731e8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

870683beaa1f2788ea52b7a2be3bb39e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord598
ord632
ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord570
ord681
ord100

Sections

.text
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ