bc458e58e114ea7dcce4108cbb4db456_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bc458e58e114ea7dcce4108cbb4db456_JaffaCakes118
Size

72KB
MD5

bc458e58e114ea7dcce4108cbb4db456
SHA1

cb2796e8ce2e83a666a83611f52ad87559825cfe
SHA256

0aa4625f10708c135683be3a10cb5222d7601552f189751044203ed8b4ada219
SHA512

0bd9382d61b01e67bbf80e3a184f1952cd0195b8ce4da1c78dce6cf90ca164163df1dcc7f806052e762ef0b6db88898edc69ceef91b461f8c6c0aa26b5fc6e74
SSDEEP

1536:sbU6pabem5O2KR2wB0fJbahYrpXZFeGoukec+cI0+d9:UabNIRtBqJrpTeGoukycN+f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc458e58e114ea7dcce4108cbb4db456_JaffaCakes118

Files

bc458e58e114ea7dcce4108cbb4db456_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b6715b3cd11253fd206bcddccd0cc546

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord526
DllFunctionCall
__vbaExceptHandler
ord712
ord608
ord717
ProcCallEngine
ord644
ord570
ord100
ord616
ord581

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ