5caedff73e42b84ecd5832d8583f0785_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5caedff73e42b84ecd5832d8583f0785_JaffaCakes118
Size

80KB
MD5

5caedff73e42b84ecd5832d8583f0785
SHA1

f7f4b98dbfa8ef1b6cba8c612c63cfe26a62867d
SHA256

057321fe4f065f82e04cb678ae151c664c1f13b6157b14f56160a4b8722698d0
SHA512

1f35ed34f9cdc38546ac35f99c32ebc754557131e4976fed8c047dd3eb6ccb2329724714a4b9bde8d83b05d2c74c233a41bc2acca53e87d9f0a826b59da8b2fe
SSDEEP

768:3BCtkCfTdrh6JA/SqSFOWb/gf6tEePQ6Pw2sGWVvgytaRHue:RCuCfJh6JA/SqSFOzTeNw2svvK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5caedff73e42b84ecd5832d8583f0785_JaffaCakes118

Files

5caedff73e42b84ecd5832d8583f0785_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7c6e4258362879119c6df8759fc0fb88

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
ord593
ord594
ord598
ord631
ord709
ord528
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord648
ord578
ord100
ord431
ord616
ord617
ord619

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 948B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ