c9612f5e4129b1f9ce4a546c6aa7718a_JaffaCakes118 | Triage

Sharing

General

Target

c9612f5e4129b1f9ce4a546c6aa7718a_JaffaCakes118
Size

791KB
MD5

c9612f5e4129b1f9ce4a546c6aa7718a
SHA1

37a51510ffdf6cbb9efced51976b010f117d91cb
SHA256

d51584c8d2211c68246a8fd98e7a1aa12c98f6a8c043356623e736517a1d0563
SHA512

715686dea87fd689657860767afc16df8abb72356d011e84c95b0116b476c7559e70be67386ed8063dd81edbd72f00adef6adb7f10f2c12bb4958b220a03c21e
SSDEEP

12288:B/RS5A5fQuPnL+Ou2Qb1W/iSq3WYiL7I+26sNZrIcn2INwMsUWeqGK4VDkFX9HzB:wtQK0gOivWYo7I+266IU1YedihFB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c9612f5e4129b1f9ce4a546c6aa7718a_JaffaCakes118

Files

c9612f5e4129b1f9ce4a546c6aa7718a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

43d06c7356c9e8f160f2724f5afa58a5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord621
ord516
ord626
ord595
ord598
ord631
ord632
DllFunctionCall
ord601
__vbaExceptHandler
ord713
ord608
ord716
ord717
ProcCallEngine
ord537
ord644
ord570
ord681
ord685
ord100
ord616
ord581

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ