d65b6c6db313102bd928b0c108b1f513_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d65b6c6db313102bd928b0c108b1f513_JaffaCakes118
Size

288KB
MD5

d65b6c6db313102bd928b0c108b1f513
SHA1

0646990b69476543cf40df25170deef533a9d2b5
SHA256

91f6b83e8c1ff6f01d96c4c3ea31dac6efa743ad96966437fde5bdeed7dced91
SHA512

aa3dcc4642099bffa2962cdc311c66129e593f146c81cce63ecd674d050bc27d43b61c5847b84f668c4f29287f12d014e204f7fdf5f7b120784e68ed1bdaf35b
SSDEEP

6144:gf7ev9Q8WrGpX2LBjhUz1vznRTDGAq9ee4RVU5w1RgQCRUiNuwUu5S/:ga9Z1pX2LBjhUPTDna4DqkMY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d65b6c6db313102bd928b0c108b1f513_JaffaCakes118

Files

d65b6c6db313102bd928b0c108b1f513_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cf33c813c076e3a50a6a0d3c2effb1ea

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord593
ord598
ord709
ord632
ord526
DllFunctionCall
ord670
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord644
ord570
ord100
ord616
ord581

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ