24e6098adb3e7d326e5f98aa4f1d15de_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

24e6098adb3e7d326e5f98aa4f1d15de_JaffaCakes118
Size

16KB
MD5

24e6098adb3e7d326e5f98aa4f1d15de
SHA1

fb75dfcc5d6c6f772e962a7a7e9873bf332aabca
SHA256

9acd572d07f7d7fc9892ac9d9b0dcb713df162b4f524841c933b99e3b3f50eaf
SHA512

8b55a1351a9dfe87b500b22dd806af959ca06a8e55e85db1e584259201d90fa56552dbdb8a21aafddf2da28e4941ed647913bc131c2d3ae95c2db2b32e711570
SSDEEP

96:O+ilsh6ZRqsu23NXDje90VPOlprZDiL/Nxng2:ICUnZMoWlp9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24e6098adb3e7d326e5f98aa4f1d15de_JaffaCakes118

Files

24e6098adb3e7d326e5f98aa4f1d15de_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ca647a3977795872f36236c40ef017da

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord644
ord570
ord100

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ