83b9ec0ce6ea50e6b5d718a12549e345_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

83b9ec0ce6ea50e6b5d718a12549e345_JaffaCakes118
Size

68KB
MD5

83b9ec0ce6ea50e6b5d718a12549e345
SHA1

00c96e12a78b05a45812ade7acf6fa32a2a44b49
SHA256

6ea9cab2327e40116e2dc052273ae099fb5a3e876ca766c1c51ee6694c93da39
SHA512

c677c356e05c0659e03b234e238776fea241eb53e37ce515c67515b1ddf8850c598825e47cce16693648d3846b578b27ba82620fed26453b28dd31810d4c2055
SSDEEP

768:VQcepF+Yxt+mV0eMwd1Jg5YUFfbihi8x1A73m4qaX7UCTR+jrjaE:qceH+Yxt+WJlg5dTiKXDuPaE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
83b9ec0ce6ea50e6b5d718a12549e345_JaffaCakes118

Files

83b9ec0ce6ea50e6b5d718a12549e345_JaffaCakes118
.exe windows:4 windows x86 arch:x86

870683beaa1f2788ea52b7a2be3bb39e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord598
ord632
ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord570
ord681
ord100

Sections

.text
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ