c00b980c7f9dd4bf76610e3602ad1f47_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c00b980c7f9dd4bf76610e3602ad1f47_JaffaCakes118
Size

476KB
MD5

c00b980c7f9dd4bf76610e3602ad1f47
SHA1

9c7eddcbb119619a68a58659fa31bb34bc285cc1
SHA256

172f976860d9070a1548fa1c9e1f8158a00a8437eadeead75b51515f591b55da
SHA512

0438aab622ee8ef25d46e0af87ea66f61481a812b48088df5a382c58652a950f39b91ba44baeb420faa2de4d3a1a8a4160439fd3c479b7e0a20766790755910f
SSDEEP

6144:A/ZsMW/f7ka+Dzx+lg0ZUYhNMA9e44CxTXrrlHbHuR/jGiuN/emFg485Im4wv:qy7/Mnx+lFPMA9e4E1CN/eER86wv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c00b980c7f9dd4bf76610e3602ad1f47_JaffaCakes118

Files

c00b980c7f9dd4bf76610e3602ad1f47_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bfc9a6f501d07bedf13ca57312de5edd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord621
ord516
ord593
ord594
ord632
DllFunctionCall
__vbaExceptHandler
ord711
ord712
ord608
ProcCallEngine
ord535
ord645
ord570
ord100
ord617

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ