ba20045354f7297d96fee5aed24e9049_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ba20045354f7297d96fee5aed24e9049_JaffaCakes118
Size

84KB
MD5

ba20045354f7297d96fee5aed24e9049
SHA1

02bac8ba625e123617873d081b5aed88df0969ec
SHA256

4fa378392fa7f00244f5ba702305b6db63f56f9ea25f6e9a8482bd557c5fc4cd
SHA512

aaf19d911755beb6e7c3e654ee7bb27187b8f76f8b4e2b283810f6a5a86cca1a8cf1186efcd5636e068a7fb6466ff0dff87fa6b70cc58d13f4b656177577905b
SSDEEP

1536:XIOhoWCU+oF7G24GWTDpzhQxYeVpIfy4o57Y2wSIw3t0:XIUzCU+oJW/paxJVpIfy4IFnN0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba20045354f7297d96fee5aed24e9049_JaffaCakes118

Files

ba20045354f7297d96fee5aed24e9049_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9c8ecca061848389861507b88d7aca87

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord631
ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord713
ord717
ProcCallEngine
ord537
ord644
ord685
ord578
ord100
ord616
ord581

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 964B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ