1513fb985ec1764df9daed342f89e0d0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1513fb985ec1764df9daed342f89e0d0_JaffaCakes118
Size

29KB
MD5

1513fb985ec1764df9daed342f89e0d0
SHA1

01b80431f174b9ab35144779e5aee2cf36231ca2
SHA256

10a9f0e08e86a39e6601e1fdb5540cf260fd399f253c9bc26a73bc4597d0109b
SHA512

c5a8bfaac5055e3bcaec6ec9bb7cfd665f86f5e25fa9907b6d4ab252fb068233c7d8908a25a729f5a683ee972b3ff4ff7e30f37703df4a3354fbbea7d5530e55
SSDEEP

384:mlCNVyI1nftJAENWrdbmNFtr1k297PZ8G2tN0HSAOwvZzONOqNMGqKDmp1+:msNVX1nVB8mNFtr1J7PZz2iNOMwq4UM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1513fb985ec1764df9daed342f89e0d0_JaffaCakes118

Files

1513fb985ec1764df9daed342f89e0d0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3d3301393c9a07f02d227cc8a3f5d624

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord552
ord703
ord709
ord528
ord670
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord100
ord432
ord541

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ