2316b9008c4da12531646d85faa0ca29_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2316b9008c4da12531646d85faa0ca29_JaffaCakes118
Size

72KB
MD5

2316b9008c4da12531646d85faa0ca29
SHA1

d4bc03e99c697c9bd65b2a963a911eff1cd73c29
SHA256

4cf15c6b6a727c99726eecf0d7b86f44fca53fa89c9e11a3a5e1b0106822502e
SHA512

39cb6a9787ab6e9b7f3b8b498c8840e09a3a6ce16332315ab4b8877475c42c984602364965a42df00878071e30422e99d0613bc3455e444e4330a9fff64e4601
SSDEEP

768:G8XYDtIfh41ROQSRqtJ67W2990OUlOznqP7Kp7dLXfhrb2rJ30dsrJi19rcA7KRQ:GERnq/GrmdTKzLvtbukds1i17iirke

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2316b9008c4da12531646d85faa0ca29_JaffaCakes118

Files

2316b9008c4da12531646d85faa0ca29_JaffaCakes118
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

946735fe418c10516f6e929f3982c919

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord626
ord632
DllFunctionCall
ord670
__vbaExceptHandler
ord712
ord608
ord717
ProcCallEngine
ord644
ord100
ord616
ord617
ord581

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ