00ef8d39cd0acaab77c81342d3413d3a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00ef8d39cd0acaab77c81342d3413d3a_JaffaCakes118
Size

67KB
MD5

00ef8d39cd0acaab77c81342d3413d3a
SHA1

7422b9d97f9635d41ef8b8c1dd4b3784700b4165
SHA256

e7d372e2a59fa134f9d2aaf14c7275e15dc86930795d27e2af6fb6a4e01d473c
SHA512

5532b42c3fc3aab32d7e3ce1526b71996ba3c9cccc3db0864da95aa5b1ccc05d1851778da793d54ef0f0458d0a0dba6e940d70d48fa4a574988f671083f6f06e
SSDEEP

768:2Hrx2A8f3tIe5zC9tv/b8yHE53oSorRUvCsguxv3Vrpl859ubT3VpcxvSbMHnUTm:1Ak3tmY5Kr2CshxHGK7HqUT60ek4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00ef8d39cd0acaab77c81342d3413d3a_JaffaCakes118

Files

00ef8d39cd0acaab77c81342d3413d3a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

43d06c7356c9e8f160f2724f5afa58a5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord621
ord516
ord626
ord595
ord598
ord631
ord632
DllFunctionCall
ord601
__vbaExceptHandler
ord713
ord608
ord716
ord717
ProcCallEngine
ord537
ord644
ord570
ord681
ord685
ord100
ord616
ord581

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ