5b15875a718f12df6eabf3c1c7e68d43_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5b15875a718f12df6eabf3c1c7e68d43_JaffaCakes118
Size

687KB
MD5

5b15875a718f12df6eabf3c1c7e68d43
SHA1

b6a280c7e1a1f185bceb0ab16da2ec2ec405b49b
SHA256

0e80180c12f4449672ba88cce52e3730f17f03dcb98b0e2868804769ec52e9f1
SHA512

f29a2a919090e9ecd399bd4beaacb614d5141b0e5cbeb2234842e62680107ef0dbd82cfec578a39449a9da3297c3ef951323f05e19d66f4f28adbb55c8e40e22
SSDEEP

12288:m6cR2R0Asy9j73f4UQ7/HRoymOfP7KojzP2eTx+qjlft+11:hc06Al9P3f4FRoyBuurFUqjlf0n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b15875a718f12df6eabf3c1c7e68d43_JaffaCakes118

Files

5b15875a718f12df6eabf3c1c7e68d43_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ea24632d093e05ed21274283190f71fc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA

msvbvm60

__vbaVarSub

Sections

.text
Size: 23KB - Virtual size: 25.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE