418e12b9c9c059f122d5969b01867937_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

418e12b9c9c059f122d5969b01867937_JaffaCakes118
Size

20KB
MD5

418e12b9c9c059f122d5969b01867937
SHA1

dc787395ea67aa9b03f4edaa2ed323db9e64d8d2
SHA256

9e8834d59dac60b9522b006eab194b263a1d4807c7a3d3e9473ac3f57098e6e3
SHA512

f6f9d702500fa16f642440ab0e3b9c1f8a828745e40a57f4316e187b25acb155e31d4479c13726dfe188d9ac5001b7678327e90715f7be7bf15e0664ec73bf60
SSDEEP

192:1zjm1gerRdGBIUXpKX/SlpYKJtdOMYyrBZOgSyGQhBxb28M:1zjm1vtdGBImA8dOMXrXSyGQhB6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
418e12b9c9c059f122d5969b01867937_JaffaCakes118

Files

418e12b9c9c059f122d5969b01867937_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f4df14a53e24d9044f61832c8aebade7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord632
ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord644
ord570
ord100
ord616

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ