83100f8e759038b2f2e3c29f4b4a7be2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

83100f8e759038b2f2e3c29f4b4a7be2_JaffaCakes118
Size

22KB
MD5

83100f8e759038b2f2e3c29f4b4a7be2
SHA1

6006142b4ea2c64ccdf196ba6aaf044523ea0bca
SHA256

cc69db37c80ffcef3ba0ce77e72809ed1b8d4cddb2f71af3fd3ae72d369938b2
SHA512

b5747b1a0c74bd9f5a4922676008aaf861e387a05df26f2912acb9d5621b06c64efd10c8e2192657d5cf21648298d2e63b9cc74479da428f3b487a50a56928e6
SSDEEP

384:zYH5wHlQx/0FWXtqhy0JbfPSDm8/w4I+95Ilrjw/qyqPsY5pVzSbdkD:cZwHly/6SDm8UQOBJy895pVzamD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
83100f8e759038b2f2e3c29f4b4a7be2_JaffaCakes118

Files

83100f8e759038b2f2e3c29f4b4a7be2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1d720e3a1abf0e1a42d17cc8424ba404

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord518
ord593
ord594
ord595
ord598
ord631
ord632
ord526
DllFunctionCall
__vbaExceptHandler
ord607
ord608
ProcCallEngine
ord537
ord648
ord576
ord100
ord616
ord617

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 852B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ