550132c7b8a9288e59efb294354f8d6b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

550132c7b8a9288e59efb294354f8d6b_JaffaCakes118
Size

148KB
MD5

550132c7b8a9288e59efb294354f8d6b
SHA1

20481e6d90bc56f9be2c6ea80310cd3b94cd0cf4
SHA256

e48dafc36a4a2689b8a5c86e2a8f564dfdfc7c654a8826ff79b957763e385c85
SHA512

426a4ce8ecd432a9f4e5c593e50037e1dda3266373cc182cff7bc4189dd2e844607865de7f57557b0613854c692f977aa82d8ad3d5551bf3f837c94e6589c882
SSDEEP

1536:lCcMWc9BCiVJO7l2bTG9Rm1wqPKkkYW7QBFyaXHy6iSnLoHB3tI:UcbcLXVJzbTG9Rm1wkkYZzHUt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
550132c7b8a9288e59efb294354f8d6b_JaffaCakes118

Files

550132c7b8a9288e59efb294354f8d6b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1f98bd0d4ae4a0bb450a380503369f65

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord582
ord187
ord517
ord518
ord519
ord598
ord520
ord306
ord307
ord527
ord528
DllFunctionCall
ord670
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord318
ord717
ord532
ProcCallEngine
ord535
ord644
ord645
ord539
ord681
ord578
ord100
ord616
ord617
ord618
ord619
ord652

Sections

.text
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ