005513a86c031182a78522263d61e1b0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

005513a86c031182a78522263d61e1b0_JaffaCakes118
Size

26KB
MD5

005513a86c031182a78522263d61e1b0
SHA1

69387c2c670cb67732ad050a31ed181195c9a2f6
SHA256

19cb596bafed27f80a20793d28a4bb667c05da7ed7fe0edf6654cb3bcbdd36ef
SHA512

c59ca3bb343ea0accc76f95439eb2176626173bd6b8a72399783d5e5a8a51073cf5dd95b61178a068e436f3356577604676f9d3b0d1bf75af6b5ef4956ef0f44
SSDEEP

384:PnJMiY/3Ur/51NWQUkMXvIdL5Tc1MwCBbges7EPEeuQyU:PQ/3Ur/5TlUka8LnBbRCE8euE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
005513a86c031182a78522263d61e1b0_JaffaCakes118

Files

005513a86c031182a78522263d61e1b0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

40b3e370014b1deb8026edd1f10d2f74

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord593
ord594
ord631
ord709
ord632
DllFunctionCall
ord600
__vbaExceptHandler
ord712
ord606
ord607
ord608
ord717
ProcCallEngine
ord537
ord570
ord685
ord100
ord616
ord617

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 724B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ