c88fd9058ebd7d65b0df08a6a0ad6b72_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c88fd9058ebd7d65b0df08a6a0ad6b72_JaffaCakes118
Size

16KB
MD5

c88fd9058ebd7d65b0df08a6a0ad6b72
SHA1

c078387ecb8e5a6c5e3239b75e53f8d22efac4d3
SHA256

351dfa2e6657dd3f3b35ddba4e2623d14ee9baa1f9d1f1abd81269206cf64d84
SHA512

871f57e0f474ccc3e75c0e5218ec9ca1f679ded3f943805b6146cc42a9b8723574a4a7d37fd4689a307db84e24619d68529092d0e25c945eb07aa69cb19bf122
SSDEEP

96:JKlP5/YfweRuV1kuVFmEzisDxZoeZjSsZtrIn/DdQ2:8PWvuV1bX5xZJVYnJQ2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c88fd9058ebd7d65b0df08a6a0ad6b72_JaffaCakes118

Files

c88fd9058ebd7d65b0df08a6a0ad6b72_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ae412ed9d50f0e004aa5f90efbfe72df

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord666
ord667
DllFunctionCall
ord600
__vbaExceptHandler
ord711
ord607
ProcCallEngine
ord570
ord681
ord100

Sections

.
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 844B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 4KB - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ