b933a6099de6d54c1f8da8406c521337_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b933a6099de6d54c1f8da8406c521337_JaffaCakes118
Size

28KB
MD5

b933a6099de6d54c1f8da8406c521337
SHA1

37331701079d4bbd9fb82c8d1b7e81b35c835961
SHA256

9b8eae1f24f6c155fbe7463d1c7fd6e7b1515ccd85903266c23466a7c3dd79c9
SHA512

c42fdef3d3c4e4cb032503e81e250d2d1e76d6b9c4504e9f0e313856ce140d1a22f5a83749a68dfbca66c587b00d81166f83a108b089457840ee658c9606f263
SSDEEP

384:qmXcRIPoFQ1sqmlezG64NCgHcmtlXQiYs1h6wH:q6/oFQ1Tm2G0gjPA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b933a6099de6d54c1f8da8406c521337_JaffaCakes118

Files

b933a6099de6d54c1f8da8406c521337_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cd81becf486c9d62d6f95dee4dc59988

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord666
ord526
ord529
DllFunctionCall
__vbaExceptHandler
ord711
ProcCallEngine
ord570
ord648
ord578
ord100

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 956B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ