9709f70a36d6a5773ff885d00489583f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9709f70a36d6a5773ff885d00489583f_JaffaCakes118
Size

24KB
MD5

9709f70a36d6a5773ff885d00489583f
SHA1

1ba2c59b3889c93d96ed67965641f121a26c9f6e
SHA256

291510c6591f15f3f474a0f5680ecfec1538ff9accbe9b6e191a829bfbaadd3b
SHA512

778cfcaf88850ccafdd4d385e4217785c780905bb09ccc4b8150bb5a6a3fda6a81403498b568c2324db5be73a81c0950614e613017fcdd9de7603f4c4b566cc9
SSDEEP

192:Ss7B5IUHN4FNXGD2sdHr6VWxpp2FQ45gRvBiltXRVyMkaMy:r2NXGD2sdHr6Vy2FQ4WRvIltXaMh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9709f70a36d6a5773ff885d00489583f_JaffaCakes118

Files

9709f70a36d6a5773ff885d00489583f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

591ea16657c71a06aad5fff763eda4af

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord667
ord595
ord526
DllFunctionCall
ord600
__vbaExceptHandler
ord711
ord716
ord717
ProcCallEngine
ord570
ord576
ord100

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 756B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ