c21ef14d5fd9a69caeaa4d3e64b08672_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c21ef14d5fd9a69caeaa4d3e64b08672_JaffaCakes118
Size

24KB
MD5

c21ef14d5fd9a69caeaa4d3e64b08672
SHA1

7da5654120f54aa11605c1af4acb322c2a125fb7
SHA256

9e3df8ec815d85f22ebe7873995ca274dc314af1a1435c111d0ca97a16b8b765
SHA512

fc956f640502195503a7aeb035c595a0b402f0fa762aa5a0c5a6f42499d79a00c9dc0f01eed938d2c9db57b7117e964c063e43db661af6271c47855e5a5446e5
SSDEEP

384:YJM8m5Y+WUbezVFp9nai4BWyYBzy+tiu1mWO0:8m5YvW89nfp2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c21ef14d5fd9a69caeaa4d3e64b08672_JaffaCakes118

Files

c21ef14d5fd9a69caeaa4d3e64b08672_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e660ab22e24797a6e31e065f6035cadd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord518
ord666
ord631
ord525
ord632
ord526
DllFunctionCall
ord600
ord601
__vbaExceptHandler
ord711
ord608
ProcCallEngine
ord644
ord537
ord570
ord648
ord573
ord681
ord100

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ