d2ee3063182e3d42dd947024bb46243d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d2ee3063182e3d42dd947024bb46243d_JaffaCakes118
Size

416KB
MD5

d2ee3063182e3d42dd947024bb46243d
SHA1

68491b57cc763979c780477510a4030ad02de4da
SHA256

4a1bf9e8c1d8705708612716599a645a36f334240788dbeba810f03fe0c2110c
SHA512

7439ec46f4dc82846407d8432b3b43e3178ae5ee446923364458b694ed3efc5c2140fc3283a7b69086b3800ff302ffc79936262607137a629e009dabf8454101
SSDEEP

6144:6mcAhY05a0P2kzB68vX1OphAeOWf8fKHiJyo5+3SxG1skD5ww1dT8J9qQS+mg6Oy:HhMyBXvX1g6WESHiJyeYe9qqfVDm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d2ee3063182e3d42dd947024bb46243d_JaffaCakes118

Files

d2ee3063182e3d42dd947024bb46243d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

48657c8c02ee7fb1aff654b0a263ea28

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord631
ord632
ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord713
ord607
ord608
ord717
ProcCallEngine
ord644
ord537
ord570
ord573
ord685
ord100
ord618
ord581

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 860B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 96KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.nPd{?9W
Size: 304KB - Virtual size: 4KB