faa2f649ba5002724f05586589f72587_JaffaCakes118 | Triage

Sharing

General

Target

faa2f649ba5002724f05586589f72587_JaffaCakes118
Size

24KB
MD5

faa2f649ba5002724f05586589f72587
SHA1

8b5737fb78848bb55c20306047e12ea948f87f80
SHA256

88af98a152193663c54e367736c7d81595e5cc217938ee173eb5ccec8ed0584d
SHA512

64c6a0c32dd340d5211327f889930f78c7d3856a42ee746846fa4bccd43e9843bd8f9a7174dc3b8e0c8841572669902c5c07d35979a80520b4b33de1d8b283b3
SSDEEP

384:QYylXFWeLW4Fo3masCzLsoNNIV5nzKPSYP0:QYylIe64FoFzsoEVdeKc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
faa2f649ba5002724f05586589f72587_JaffaCakes118

Files

faa2f649ba5002724f05586589f72587_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6f337b34b154954e9afa6bff418e75a3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord665
ord595
ord631
ord525
ord529
DllFunctionCall
__vbaExceptHandler
ord712
ord608
ord716
ProcCallEngine
ord644
ord648
ord576
ord578
ord100
ord616
ord617
ord619
ord580

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ