97116483b9a35bd6e9329ed31c5aa2a8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

97116483b9a35bd6e9329ed31c5aa2a8_JaffaCakes118
Size

140KB
MD5

97116483b9a35bd6e9329ed31c5aa2a8
SHA1

a959fd76fdcc607e3042b130a1895e35eac65ecb
SHA256

1b50668cee071704bdfe86ef2ba10ebab5af098f21c3f5c88955acb7c7f25702
SHA512

cbc6fa3b554211fbebe00d929aec7c97949a67d9214956841e2ffdcfa86d6a3f8711fd1675d1c0eab2c591019a83339b09199b44c2665ff2866bef7c5cb25717
SSDEEP

1536:cOolf3UJDBREsUdbv32cUAIqyWvxIkW3iqmQoEgKr0jl2EBZem:cOosB+vCA5yklfZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
97116483b9a35bd6e9329ed31c5aa2a8_JaffaCakes118

Files

97116483b9a35bd6e9329ed31c5aa2a8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ca647a3977795872f36236c40ef017da

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord644
ord570
ord100

Sections

dfgdgdf
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

sdggfdd
Size: - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ffgtyyt
Size: 128KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ