289ff557a07cf30a45dbfbd4b9bd4916_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

289ff557a07cf30a45dbfbd4b9bd4916_JaffaCakes118
Size

487KB
MD5

289ff557a07cf30a45dbfbd4b9bd4916
SHA1

b16fa7014e5dccd9b8b924074d1835a0621c4938
SHA256

5c0dfd0fc6f678f7f34784990b285ffd0265c63719f730677b54f64efa4b32b1
SHA512

c27ef87a1f1fb37c955208aed36826731ad8c0a600f42ce5d06bed6689173b0b1cde87c9d695e85530539d17b48fd399db94ffcf031c3261f53d89653b09eded
SSDEEP

12288:tLkcas0dwpJH9i5cGhQCzF7IY3bBfB669zS:tLkcaFe3U5cOVFUY3VA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
289ff557a07cf30a45dbfbd4b9bd4916_JaffaCakes118

Files

289ff557a07cf30a45dbfbd4b9bd4916_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f5c85b08a645ded5eed8b6292c8d1705

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord665
ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord716
ord717
ProcCallEngine
ord644
ord100
ord616

Sections

.text
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 204KB - Virtual size: 203KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ