9fc781e814af1fef83e793bf3fce5adb_JaffaCakes118 | Triage

Sharing

General

Target

9fc781e814af1fef83e793bf3fce5adb_JaffaCakes118
Size

20KB
MD5

9fc781e814af1fef83e793bf3fce5adb
SHA1

923fc17b2dad9139b0f9999e2c4e0a638ac2ea30
SHA256

1ce483bb2dbb485ac33fdec3c74353fc62aed89bd07cfac7d6a84e1eba2768a1
SHA512

ff6b943eac24cc9b3a1950236eaf68c47507f4c0dc3536a29cc5e06cf66484b2bd4516d431096abf5aae33ea97ac66ad20c366e3eee9a7a34c179d88a4ddd5c8
SSDEEP

192:20mhChx6sEtjDeuObKENiT1cC5hiRRBs5c6oKvwMtqaJO:hmTXaKgmaC2RRBsP+B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9fc781e814af1fef83e793bf3fce5adb_JaffaCakes118

Files

9fc781e814af1fef83e793bf3fce5adb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

16fdd07aaa2a73c976ac1976569145f7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord621
ord516
ord593
ord598
ord632
DllFunctionCall
ord601
__vbaExceptHandler
ord711
ord712
ProcCallEngine
ord570
ord100

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ