0155f75f03b4112824126ce45d513470_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0155f75f03b4112824126ce45d513470_JaffaCakes118
Size

297KB
MD5

0155f75f03b4112824126ce45d513470
SHA1

fcc17e170f5087857ff1f02a55e11609789b0545
SHA256

e26fdb1518f905c342ced58273c34eb42c582ba934cdb99d78f69a038d8a97d5
SHA512

6e7b9877174a7d67ae6f6408e273562bed000836a73829756ad7545ac2e78c8c0d820d421e7c9cc3ded7157d972c95310c6e1a36b55c83161b5f8dd0c7d452d5
SSDEEP

6144:OhKSU3rLuMmPySeYGaoAZMSGvi0aY64MC2j2R/nyY/VYej:O+unKCLMS/DY6r9a/yY/yej

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0155f75f03b4112824126ce45d513470_JaffaCakes118

Files

0155f75f03b4112824126ce45d513470_JaffaCakes118
.exe windows:4 windows x86 arch:x86

17cd0f13bbd3151581a46419b98f2a55

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord518
ord626
ord666
ord598
ord632
ord526
DllFunctionCall
ord563
ord670
ord601
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord717
ProcCallEngine
ord644
ord537
ord570
ord100
ord616
ord617

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ