88a193f4a55a205f1abd77443585be2b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

88a193f4a55a205f1abd77443585be2b_JaffaCakes118
Size

636KB
MD5

88a193f4a55a205f1abd77443585be2b
SHA1

43be33dae0dbbdcd0042af225f2c5f134fc276fa
SHA256

a83003f33016731967a22cdc9ddf75816df67172e646a5b6cc9d4451be32d287
SHA512

94f050736bfed495998eb88aed806e52b9d73eb4722fc670adcb32606383032f93c86ebd7853151e99750b3fadc9f84fb0b990b32d446df4b130b299902b19b0
SSDEEP

6144:w2RaOq9lzXx4ckz95pJ4nrLoMnqm9D6XLrICucKHHZwxJ:iccqTKrLoMnqm9DgLrICucs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
88a193f4a55a205f1abd77443585be2b_JaffaCakes118

Files

88a193f4a55a205f1abd77443585be2b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0812f160ace1059f5b9d9e287f885c84

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord661
ord523
ord632
ord525
EVENT_SINK_AddRef
DllFunctionCall
ord563
ord673
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord100
ord610
ord612
ord617
ord544
ord546

Sections

.text
Size: 624KB - Virtual size: 620KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ