86decf45e54b3a2816d2249b6a59f9be_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

86decf45e54b3a2816d2249b6a59f9be_JaffaCakes118
Size

56KB
MD5

86decf45e54b3a2816d2249b6a59f9be
SHA1

1ab6bf93d1586f9e98209ba431594f3ea77d7b2b
SHA256

a28b5084fc1f9b50535d7e15488f8688cf74162870f585f6cb61b5c6be8a3b4c
SHA512

10f0702d46f0ea06983fb160d4bb4fb9a23b99c4fc2d0c65992e413116d4bb10ff1e7aab90e83e96129455938c5767be6c3e2d35b5e990573cf6b55f97e1ed77
SSDEEP

768:MZZVNMDRXENpxdbR2PnXSvA+iAdOMAr2d+sUnbTzL8mJuJyYlwK0/Jumn:QSDRXSzXdiEF02EsU3zLdJcwK0/Jumn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
86decf45e54b3a2816d2249b6a59f9be_JaffaCakes118

Files

86decf45e54b3a2816d2249b6a59f9be_JaffaCakes118
.exe windows:4 windows x86 arch:x86

84ed2ee0c32554dfa81f4b880ba0ce2a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord593
ord631
ord525
ord526
ord528
DllFunctionCall
ord601
__vbaExceptHandler
ord713
ord608
ord717
ProcCallEngine
ord644
ord681
ord100
ord617

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ