79094bb44a9b67c44f1609cb01636517_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

79094bb44a9b67c44f1609cb01636517_JaffaCakes118
Size

26KB
MD5

79094bb44a9b67c44f1609cb01636517
SHA1

701bd2f739c118c5a6986c77d4b8d096a3a74dbe
SHA256

49de02d35ac41374b5ce32afbdf2e8f0b338d831c67e8fd70ad027e90e6df76e
SHA512

a1aeb25c6e5c5756cc76b4653020bc79dce2f06044103f23faf9861ce234691a00aa965c7e14a69f50ab2915759a56dbbbed5aedef36a93c539247dd8946b88f
SSDEEP

384:5VGa/fec5YzWUIN5JJO7ocuDg+nUHJg0tx0/PUxS20:WsWqYzpITPAKuHJg070Ux

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
79094bb44a9b67c44f1609cb01636517_JaffaCakes118

Files

79094bb44a9b67c44f1609cb01636517_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a4ad7d5b005c95b6d3f5dd8874a9648e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord518
ord598
ord709
ord631
ord632
DllFunctionCall
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord537
ord644
ord576
ord100
ord616
ord580

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 844B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ