b95706dd3fda2633d744a61dcbffd818_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b95706dd3fda2633d744a61dcbffd818_JaffaCakes118
Size

157KB
MD5

b95706dd3fda2633d744a61dcbffd818
SHA1

7a9563270d00eb097534f8c5916d2845b5bdd2e3
SHA256

943696741a377c0daf5796814b40f7d570a49c3ee441be4d190fdca000752a34
SHA512

af869fa5acf8a78d7ecad4e7dcab38f342642fb3a798e77027995feebc7e7e0824734fe594f269d5e077a1e885a2d21e8d2e611579284a494dd5fa6446ededa3
SSDEEP

3072:AFdjybkjFp+tp//DEywOagb9aCWNq8RqDSJZiZyfx:LsFpI/IymNq8RxKZWx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b95706dd3fda2633d744a61dcbffd818_JaffaCakes118

Files

b95706dd3fda2633d744a61dcbffd818_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b6715b3cd11253fd206bcddccd0cc546

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord526
DllFunctionCall
__vbaExceptHandler
ord712
ord608
ord717
ProcCallEngine
ord644
ord570
ord100
ord616
ord581

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ