b215f47f997c671d55843bbda8b09ccc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b215f47f997c671d55843bbda8b09ccc_JaffaCakes118
Size

788KB
MD5

b215f47f997c671d55843bbda8b09ccc
SHA1

78aed4e0ec3c1ccdc629c7fe8c6a8dd01f9ad08b
SHA256

21fcc61338d3c7c0170d427287411af91778a5df661131cb99ab1c1b86b66b37
SHA512

b70713ffe29ece6a577b96bbd5c8996e76102acbd5814e9381e5c79ae941d5998e4776b4dff589956787d41e513b0674d0d9aad4476d7e2ff5bf913a2bcafe66
SSDEEP

24576:t4Rmeyy7AwChpX6lU/AI/BmiCVtnGeU+B3PLAgQO3:ImByMzv7/AHhnZUa3TNt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b215f47f997c671d55843bbda8b09ccc_JaffaCakes118

Files

b215f47f997c671d55843bbda8b09ccc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8288059fbdc0ed850c30daaa435a4fc8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

__vbaStrCopy

kernel32

GetModuleHandleA
LoadLibraryA
VirtualAlloc
GetModuleFileNameA
ExitProcess

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 452KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

code0
Size: - Virtual size: 253KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

code1
Size: 772KB - Virtual size: 769KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ