88d7c263b7cecbb5fb8b4e8221bfdc50_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

88d7c263b7cecbb5fb8b4e8221bfdc50_JaffaCakes118
Size

20KB
MD5

88d7c263b7cecbb5fb8b4e8221bfdc50
SHA1

dc5629de1b52bff6d442a9550cb1b733c33e23c4
SHA256

8c4605ce30db07d2e9f5c63e682a89a90c5042d0b77fd3e446b5c326e6dd101e
SHA512

03b493f3367c9e53b610448486d54101c2613a0d35a03596055e7ba2954f642d7653787922ade87d3684509e9e026d3da3b369fd7dc28e29fa5f758b15a7da79
SSDEEP

192:04yqQY9aXEa6bQYaPryNQi8a6DA6lLEMmZRPh+kBz:01qQvXQ/m/EMuXBz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
88d7c263b7cecbb5fb8b4e8221bfdc50_JaffaCakes118

Files

88d7c263b7cecbb5fb8b4e8221bfdc50_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ecaa1b0194d100b65e97ea639b6a76ca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA

msvbvm60

__vbaCopyBytes
DllFunctionCall
__vbaExceptHandler
ProcCallEngine
ord644
ord100

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ