ee9127fe384fbd7bf785dd957b589a8e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ee9127fe384fbd7bf785dd957b589a8e_JaffaCakes118
Size

20KB
MD5

ee9127fe384fbd7bf785dd957b589a8e
SHA1

6aae9667e60a81ff421eabbe83a33d68f15a2de8
SHA256

d2d24b8d785e3445507561f87600f6069ec897d0ab671b423471e38669602073
SHA512

5c7a9f1301f0bb11eae146b44bb4dbedcc96c203825bcd22725bd582eed777c20587fbc53c5c0930722665107d828de5354e7d59fa160fe95263132f2dbe7072
SSDEEP

384:y2KWXfolfoa0eAfoa0eAfoa0SAfoa0eAfoa0e0NpRBx9s:y2KWXAlApApANApA7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ee9127fe384fbd7bf785dd957b589a8e_JaffaCakes118

Files

ee9127fe384fbd7bf785dd957b589a8e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dc466cb2c85cfeb2fc068f603b3a0d84

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord593
ord631
ord709
ord529
DllFunctionCall
ord600
__vbaExceptHandler
ord711
ord606
ProcCallEngine
ord537
ord645
ord570
ord648
ord681
ord100
ord579
ord616
ord618
ord580

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 772B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ