1296943916d4ffb653b042d52a125f40_JaffaCakes118 | Triage

Sharing

General

Target

1296943916d4ffb653b042d52a125f40_JaffaCakes118
Size

29KB
MD5

1296943916d4ffb653b042d52a125f40
SHA1

f2441b10ad5a9d6beca3c61362a12cd525305949
SHA256

40d8403edaa8571ce099abb5783d433185d9363317508755b780efff5e6692d4
SHA512

147d461a955132d844e48e78e865463de08795c809a507f82e4e10cc09cfe9aa2d8f49a617c03774f3aa63d3cad6dc93b6c06ab0dffefd35421b321547cc1565
SSDEEP

768:jXNvHKvZXZGyCU+qhwtOMkJE2a2TiNOMwq4NI:jXNv4ZX7C4hQKM2T1NI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1296943916d4ffb653b042d52a125f40_JaffaCakes118

Files

1296943916d4ffb653b042d52a125f40_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3d3301393c9a07f02d227cc8a3f5d624

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord552
ord703
ord709
ord528
ord670
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord100
ord432
ord541

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ