188d31d5c4a11ae10abf142e5c8affa3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

188d31d5c4a11ae10abf142e5c8affa3_JaffaCakes118
Size

125KB
MD5

188d31d5c4a11ae10abf142e5c8affa3
SHA1

247d8a9d416f87205a1606c02d74db7f6619e185
SHA256

09ae3d5db603913c4091a21532d3deff0be4cb375edebe51310b3421a214410b
SHA512

d839141f58e545c1e377c6c3b5afbe8922346d9b9dc3dcef634d0f9e70af35d206a8a8e2ae8e66728704cafe911db37402d6f891a68316db6fc2cc8e1fa47207
SSDEEP

3072:9cHiW+BtWZ98dl3JRLysJLIJwsJWzdfheljPBfG4B:SHiPBtldlL1soB4jPJhB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
188d31d5c4a11ae10abf142e5c8affa3_JaffaCakes118

Files

188d31d5c4a11ae10abf142e5c8affa3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

58eddd9ff3470939f5e91c1fecee31b5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord666
ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord570
ord100
ord616

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ