b8ddd2548ff26d66fa02d9751650d67a_JaffaCakes118 | Triage

Sharing

General

Target

b8ddd2548ff26d66fa02d9751650d67a_JaffaCakes118
Size

28KB
MD5

b8ddd2548ff26d66fa02d9751650d67a
SHA1

7c081ef70c82ce0f043f6fb976ffd5ee44dcc196
SHA256

5d8ec7d74770b558feb5b289989aa25c478bf6d4d4285723b9d1f40730ead7d8
SHA512

6bc3aebb204f315d2d9ca59e9ca2bd8430b2f61be05e01a9cad0a6aa44367463c01150dbceba258bf6af3ff241a662c6ab4f27df981d39c3173455febff55284
SSDEEP

384:iLLcRIQfBFIasqmlezG64NCgHcmtlXQiYs1h6wH:gLgfBFIaTm2G0gjPA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8ddd2548ff26d66fa02d9751650d67a_JaffaCakes118

Files

b8ddd2548ff26d66fa02d9751650d67a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cd81becf486c9d62d6f95dee4dc59988

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord666
ord526
ord529
DllFunctionCall
__vbaExceptHandler
ord711
ProcCallEngine
ord570
ord648
ord578
ord100

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 956B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ