088457daa9ba258bd3fed4e099e63868_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

088457daa9ba258bd3fed4e099e63868_JaffaCakes118
Size

28KB
MD5

088457daa9ba258bd3fed4e099e63868
SHA1

0c7c18f98745e8d3fa22b3ee93969988458551e8
SHA256

afb9314c4679de217387df0b671e6fd9b9aae4330425f7fb914fd239f6a6555e
SHA512

27d3c8f9d39daeda0a3b8693b12d3dbf0d63b3e8443767cc0f9b2aca466ae9984203e7040822b4425d70bf515d35730b4991c491490239540e283e518a7f3bf4
SSDEEP

384:hwhcRI/UZFIPsqmlezG64NCgHcmtlXQiYs1h6wH:WhvUZFIPTm2G0gjPA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
088457daa9ba258bd3fed4e099e63868_JaffaCakes118

Files

088457daa9ba258bd3fed4e099e63868_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cd81becf486c9d62d6f95dee4dc59988

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord666
ord526
ord529
DllFunctionCall
__vbaExceptHandler
ord711
ProcCallEngine
ord570
ord648
ord578
ord100

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 956B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ