c895e28ea18d82b20d58d41756a9090f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c895e28ea18d82b20d58d41756a9090f_JaffaCakes118
Size

120KB
MD5

c895e28ea18d82b20d58d41756a9090f
SHA1

3ec9c5614f0aae34ad8e96b55cc088085c259f1c
SHA256

01318743ee9edb83d3ee2a5ec7067933cc2364fb53204e051c2c5c6d9256e811
SHA512

90bc7aefc02808c9e8aaf1726290eb5bbd12a1331451638454e207addfe120b75764fb227f2c81da0dbd4f9052c33b2ec24c670f8adf40416f4c92f95abb7cfe
SSDEEP

3072:HAaQBL8B2HpQXbMU4r4wtEE0H3sESRR0wLw7C:HeBLTHpqgvssr0cES31Lw+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c895e28ea18d82b20d58d41756a9090f_JaffaCakes118

Files

c895e28ea18d82b20d58d41756a9090f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

994eda553403753a0eda38a5898bbe9e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord631
ord632
ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord713
ord608
ord717
ProcCallEngine
ord644
ord537
ord570
ord681
ord100
ord581

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ