87c1e4487c525659a9d278d4da82493b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

87c1e4487c525659a9d278d4da82493b_JaffaCakes118
Size

16KB
MD5

87c1e4487c525659a9d278d4da82493b
SHA1

2e2990956b1051415a46bcd447dff86aeafbdf04
SHA256

c93d7bcdcaa3df7c11a6902420243fb39dca11b8c9af4d2774959306cac06359
SHA512

32849ed81c5d4d95dc5196d1c36f8006463fb5fc3cb3058f32ffe4c3ea72bcc27344e342051c100dd5ec63a2d3ee9c8a5456a25abe5bff36177f5564c55cd6ab
SSDEEP

96:ZZ2WMLWoFlGGhQ74TaCPD+1TwbTde/UqzHN3Ur/5/5tG5XW9TyQxtLQl2:nGjbJMiY/pL9Ur/5/e5G9uStLW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
87c1e4487c525659a9d278d4da82493b_JaffaCakes118

Files

87c1e4487c525659a9d278d4da82493b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

40b3e370014b1deb8026edd1f10d2f74

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord593
ord594
ord631
ord709
ord632
DllFunctionCall
ord600
__vbaExceptHandler
ord712
ord606
ord607
ord608
ord717
ProcCallEngine
ord537
ord570
ord685
ord100
ord616
ord617

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 724B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ