d731c0f28eefad9bdc37eb385ee16671_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d731c0f28eefad9bdc37eb385ee16671_JaffaCakes118
Size

20KB
MD5

d731c0f28eefad9bdc37eb385ee16671
SHA1

1dfcb0241e8a53356d1db0234fd2f0bb23abd14e
SHA256

5b14439289b55524aaebd89ac4ab190ec324ea7e403a301183542e1b9988f843
SHA512

4766c3ec5c412473ccb20e095e4e2f8590e702991a6d8b4cd4f52beadd74006e4880bd295a05c6d0c1e9f5f83f79a16d693669e1016c432e754c9f231fadf670
SSDEEP

192:xNqs2op0EMgCCIT2C6cSBACtPzH/Sa7ACwwiQ1J:xYHEMgCCIK5DAaq6ACwwiQ1J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d731c0f28eefad9bdc37eb385ee16671_JaffaCakes118

Files

d731c0f28eefad9bdc37eb385ee16671_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d4f0a0ef1906debaa5937ad418a0fe60

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord631
ord632
DllFunctionCall
__vbaExceptHandler
ord712
ord606
ord717
ProcCallEngine
ord644
ord572
ord100

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ