8288d969dc2930d4d60dc1872bfdd6aa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8288d969dc2930d4d60dc1872bfdd6aa_JaffaCakes118
Size

44KB
MD5

8288d969dc2930d4d60dc1872bfdd6aa
SHA1

56990680803341d1e33bc0349ee90f12ce1c170e
SHA256

32885527983d5a7611c777d40e2ac7c23dc231565d6133da93579785ceb5d2e3
SHA512

353dcfdd02abe1bc1e3d8eaa5fb4fa0fe15e464f9aa628e585ee0990adbfc3c06a60acf3dd2399d5379d49fe001c5dbe0d67e63697afa664a91e4fb2f3b7ed4e
SSDEEP

768:Mdw7vn9pbV+ZCfvUMRMpQf426/G5csXs17iEBZ3/A1zFx:Mdav6qMzIS2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8288d969dc2930d4d60dc1872bfdd6aa_JaffaCakes118

Files

8288d969dc2930d4d60dc1872bfdd6aa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bb1fe971e55016a40af33c9daccb9de3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord518
ord595
ord598
ord709
ord631
ord632
DllFunctionCall
__vbaExceptHandler
ord607
ord608
ord717
ProcCallEngine
ord537
ord644
ord573
ord576
ord100
ord616
ord617
ord618
ord580

Sections

.text
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ