391258f274a13fe9e7affc8e8f3f1711_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

391258f274a13fe9e7affc8e8f3f1711_JaffaCakes118
Size

98KB
MD5

391258f274a13fe9e7affc8e8f3f1711
SHA1

bb838dfb88fdd4f9531343a08410cf7b8ea630fe
SHA256

b24f1fde90ba52b157a707141b38a66d302e3a08f17068d1a7729406a4c4207e
SHA512

420c057b5040344c6883f096eec3384555c0b04bf99122f0177c42abca72f3a7c4ca9923144dafe57f0914028bfda6d1ed41b2e884191d43cc4ca46ba983b764
SSDEEP

3072:Yd36Mot2OSCGJ4CgSgI+CqchsDFOAiVLB8fKYd:Y8t2glSmCqYsDFwVUKYd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Im sexy.exe

Files

391258f274a13fe9e7affc8e8f3f1711_JaffaCakes118
.rar
Im sexy.exe
.exe windows:4 windows x86 arch:x86

48657c8c02ee7fb1aff654b0a263ea28

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord631
ord632
ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord713
ord607
ord608
ord717
ProcCallEngine
ord644
ord537
ord570
ord573
ord685
ord100
ord618
ord581

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 860B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.�4Rt�Ue
Size: 144KB - Virtual size: 4KB