c80d0269918fbf946045e0429f38afa3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c80d0269918fbf946045e0429f38afa3_JaffaCakes118
Size

28KB
MD5

c80d0269918fbf946045e0429f38afa3
SHA1

ae687559922685cd701d391c0f3182e8ac118222
SHA256

aef3cb443bc6bac866c55c899f3bc11a3fbb6e5dd9de549cde355374dbb7957e
SHA512

cdb7efe541058bb41c42fb88172f2e581bfc60588efa4640a457cf28868391dd66685e61a0a30ff62a8492502898cdaf90063f47a04843fa7d0e52c915ec5643
SSDEEP

384:f5FfKAiM/T42bFvFyZdUoUyGFvvJMrjWjbdmsXBd:fVR5vlpTXJyWjb9d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c80d0269918fbf946045e0429f38afa3_JaffaCakes118

Files

c80d0269918fbf946045e0429f38afa3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9aff2c82c063f03a36bc9d556a90289b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord644
ord100
ord616

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 956B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ