396ae44ea2944a945f81dadf242bec49_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

396ae44ea2944a945f81dadf242bec49_JaffaCakes118
Size

112KB
MD5

396ae44ea2944a945f81dadf242bec49
SHA1

f0ca71154911ba49a71791ae4e9552e1e8ed7af0
SHA256

d9a765c21e0b204258c946610951d558d93bf5905fdd501de9c1fb065f43bc9f
SHA512

e5fed299b4cb78709dff0de631b0391ff2ce689bb919dc0e93583d9a5f2c940b22f464d0c2c238530ec21c99adb457224e27e65d52d00a2cb68e31c38e7a7d8d
SSDEEP

1536:mwXR4qpZrdc0wEWIpHz7uRNCw1UAtKVF+tUF+6bMMv5IR2aWGr4DBdWU9OLyM:rpTc0wEWCT+NvyA80u5btxCL4BdL0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
396ae44ea2944a945f81dadf242bec49_JaffaCakes118

Files

396ae44ea2944a945f81dadf242bec49_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a916021b6c1baf8e6ddcae46dab89fe4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord626
ord666
ord595
ord632
ord526
DllFunctionCall
ord600
__vbaExceptHandler
ord711
ord608
ord716
ord717
ProcCallEngine
ord644
ord570
ord100

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 96KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ