JaffaCakes118_0c21f91acd313d7f2d8a6d46569a4c3d | Triage

Sharing

General

Target

JaffaCakes118_0c21f91acd313d7f2d8a6d46569a4c3d
Size

368KB
MD5

0c21f91acd313d7f2d8a6d46569a4c3d
SHA1

12f30c644ad88be87118883e14a174434d4de352
SHA256

350c0056df7d105a2db75514279f8eed153d560b299fc4be9eea1f356f19251a
SHA512

95f3d7464e4c9a2ce80b167b74e3318d5ad8a647589add8e419e9193f1a70501457e188f17b0ac71e3211476930642955e7f5c372d51d10a6504342ebb62c8c0
SSDEEP

6144:4kwCSRZdfV0kq76ymDBjcPpm2sV8g47aglC:PxSRPfikq74VaM2f7aI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_0c21f91acd313d7f2d8a6d46569a4c3d

Files

JaffaCakes118_0c21f91acd313d7f2d8a6d46569a4c3d
.exe windows:4 windows x86 arch:x86

ae4e12fe9acfcd24c5e93f45e77f937c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord518
ord666
ord593
ord594
ord598
ord520
ord709
ord632
DllFunctionCall
__vbaExceptHandler
ord712
ord608
ord717
ProcCallEngine
ord535
ord644
ord648
ord681
ord578
ord685
ord100
ord616
ord617
ord619

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 300KB - Virtual size: 296KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ