b5e30f8a7009c24f203e4ea312838e51_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b5e30f8a7009c24f203e4ea312838e51_JaffaCakes118
Size

16KB
MD5

b5e30f8a7009c24f203e4ea312838e51
SHA1

eac574d38a6eef98dca64b96846b7afb39776045
SHA256

f4f4f9c6c2df8b282b4c76e59f380e7559ed6b643a12a838967d37dac2d6e021
SHA512

9d2cfcad3f352ce67af576d285eee46e679dafaee70d49498eb8de97535ef25a7cc14c829d3b2e093554be4a220685800f4656a16ba2c15825e7a2169554a029
SSDEEP

96:tKlP5/Yfwe4uy1kuVFmEpisDxZoeZjSsZtrIn/DdQJC:4PWCuy1bXzxZJVYnJQJC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b5e30f8a7009c24f203e4ea312838e51_JaffaCakes118

Files

b5e30f8a7009c24f203e4ea312838e51_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ae412ed9d50f0e004aa5f90efbfe72df

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord666
ord667
DllFunctionCall
ord600
__vbaExceptHandler
ord711
ord607
ProcCallEngine
ord570
ord681
ord100

Sections

.
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 844B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 4KB - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ