a86995f9ddc93404b8a58ab02d5685a7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a86995f9ddc93404b8a58ab02d5685a7_JaffaCakes118
Size

72KB
MD5

a86995f9ddc93404b8a58ab02d5685a7
SHA1

d70e81f802d0b9b78e135c18e0fed79fb1d3ecd9
SHA256

1a1efde7c3fa2c84789a2dad497ee90c560429a9024d60ba7613c8b60d489d47
SHA512

45f3db59cd4caa8a6f65a0d617ca79830de2988b4c0473b39c873df4d1ff0f4dbe7ff20d50d555dc34ee953d544b691d2f7262369c787464d85dc5f664ea3c68
SSDEEP

1536:gZIX914RiJ86eA3Ap8z5xwnUgKr9RI0WCB9:114UNw8z5anUHHlWC/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a86995f9ddc93404b8a58ab02d5685a7_JaffaCakes118

Files

a86995f9ddc93404b8a58ab02d5685a7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7c46b9fcc5a1ecb307e04a44afc555a9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord665
ord526
DllFunctionCall
ord670
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord537
ord644
ord570
ord100

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ