ff836d17b1fe08fcd6116a9fa73226ce_JaffaCakes118 | Triage

Sharing

General

Target

ff836d17b1fe08fcd6116a9fa73226ce_JaffaCakes118
Size

56KB
MD5

ff836d17b1fe08fcd6116a9fa73226ce
SHA1

7d4a8a5e35102e6530919f95bfbacc65ebde0133
SHA256

165b42e2152f220e737b9932c91c87bdefe2542ba6f360d773a3be19eab2fd6b
SHA512

dd399af9423ab8e82993903f9ce9069ff246e48fd99d9377a7a584815f1b7487a58bf9d1fb53eceea1b7b665139f48d577909f0772ab3533433e2299d122fb83
SSDEEP

768:GA6B6xyqopMPAO6ChO2UHPQbzdFOFoMU6AHyktJ0ay/sGMWYlCKY3Sb:GA6BEyqk8+CZOOMFAYM13Y3Sb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff836d17b1fe08fcd6116a9fa73226ce_JaffaCakes118

Files

ff836d17b1fe08fcd6116a9fa73226ce_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a4ad7d5b005c95b6d3f5dd8874a9648e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord518
ord598
ord709
ord631
ord632
DllFunctionCall
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord537
ord644
ord576
ord100
ord616
ord580

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 844B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE