8330f2f030572870567c2ef84c4340b0_JaffaCakes118 | Triage

Sharing

General

Target

8330f2f030572870567c2ef84c4340b0_JaffaCakes118
Size

32KB
MD5

8330f2f030572870567c2ef84c4340b0
SHA1

2ecd9453efab44c00c365d31d69179cac7083d07
SHA256

47f2a34c56e01a01d767c330ef9e55a9873fb169e51e7031d486591cb1670d8e
SHA512

14b30b71cf0b055de22be9e234fd88fe643020b075fe3ae9b3c20a5a80e97ed11b6870913dc9e9e89ec090a52c51756ae6e2b5a67f8fc547cb48a2e4869286f9
SSDEEP

384:GTccRM4ZFQHsqmlezG64NCgHcmtlXQiYs1h6wHQSYPpF/tBQ:OcsZFQHTm2G0gjPAlSYf8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8330f2f030572870567c2ef84c4340b0_JaffaCakes118

Files

8330f2f030572870567c2ef84c4340b0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cd81becf486c9d62d6f95dee4dc59988

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord666
ord526
ord529
DllFunctionCall
__vbaExceptHandler
ord711
ProcCallEngine
ord570
ord648
ord578
ord100

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 956B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ