65e89655334a2084f5e6ec5a0dc36372_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

65e89655334a2084f5e6ec5a0dc36372_JaffaCakes118
Size

20KB
MD5

65e89655334a2084f5e6ec5a0dc36372
SHA1

1822d5b89fcdc6b4d3616680aa69fe0a74e3b35d
SHA256

b5fbd5eff708abb3e7fce958e122829fa65dca804c3cfec48ac51f9268208006
SHA512

3d5046ac4de3194b849de507b3912dd22aa309943456f6d5f2bbb6341f3ddf3dc41d4dfe4bd170fb31dab8b189241709c04f29aac0388492f0924b1987a91068
SSDEEP

192:vDXHuBrySRBo/yy9UWUOU3L7Yl9xZ5FTL//JZpkM:bXLSRBoSZRvSiM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
65e89655334a2084f5e6ec5a0dc36372_JaffaCakes118

Files

65e89655334a2084f5e6ec5a0dc36372_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f4df14a53e24d9044f61832c8aebade7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord632
ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord644
ord570
ord100
ord616

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ