JaffaCakes118_6359468cab346a2c028ca4319bb08302 | Triage

Sharing

General

Target

JaffaCakes118_6359468cab346a2c028ca4319bb08302
Size

729KB
MD5

6359468cab346a2c028ca4319bb08302
SHA1

4b095b3d961878ec375e82f2f8ab87514c364ede
SHA256

3c85f80402648183c16f7b85d3a9f732a2addd229c4a1ad906a17955a82cd138
SHA512

85ca59e97238a7a764287874ad7834ae802ecb8c22c1e59f3a1080d1faea73dd409c89802c9f8381b404b896542288a3324cdc71b0e01b71917b3b4176e315d4
SSDEEP

12288:jiQQoMrqlyn040pgZwS/2iFkKPGZH5mbYYJreuDs1nX31usRZHeto9Nxc:jiLoMrqwn0tpgZwgOmPbol3UsRBHxc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_6359468cab346a2c028ca4319bb08302

Files

JaffaCakes118_6359468cab346a2c028ca4319bb08302
.exe windows:4 windows x86 arch:x86

9f2fc2f5f8b46c5fcd153c0ecf4f6b20

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord631
ord526
DllFunctionCall
ord670
__vbaExceptHandler
ord713
ord607
ord717
ProcCallEngine
ord644
ord570
ord573
ord100
ord616
ord618

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 884B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 616B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ