adb15d641e9ebe9a155914787b4ec26e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

adb15d641e9ebe9a155914787b4ec26e_JaffaCakes118
Size

16KB
MD5

adb15d641e9ebe9a155914787b4ec26e
SHA1

540fe8c25d970588c91eae65fbf9bd1f08ac5be4
SHA256

709f1b0321868a11d0999c1af50078f1385324d5e2869ab4cf8b57160c8d509c
SHA512

c58d4955f6c488a5596f8a2959db78bebd3f221b4b9c5ff6cd27a8fa80bc01c4dc0858872d77620afca9f09e9e5b2b476f0ea3d6958582493f2b7d421e84e7b6
SSDEEP

96:c/QPg3XCyENfMdI5VGxqzEMewJ5YhKChn+EXv+glZwNkYplNtnE0ErEz2:esNfmI5QxwEMtC8EXvfwf1E0ErEz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
adb15d641e9ebe9a155914787b4ec26e_JaffaCakes118

Files

adb15d641e9ebe9a155914787b4ec26e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b7bcce95af1b192628e97b634a6f9640

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CallWindowProcA

kernel32

GetProcAddress
LoadLibraryA

msvbvm60

DllFunctionCall
__vbaExceptHandler
ProcCallEngine
ord644
ord100

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 916B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ