f0770db0a9b8784b44b0675287ae3e31_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f0770db0a9b8784b44b0675287ae3e31_JaffaCakes118
Size

12KB
MD5

f0770db0a9b8784b44b0675287ae3e31
SHA1

640a59eabe29afaaf512d0e69a3eaa0acec145f0
SHA256

1722067e6035f4494e6bc18a26eb0a5facbdc23f0628969417dea4de387686a5
SHA512

b18f1eb9042369190749164534d4277bf688f9e9c66adf7227f827965dbf3480a32329cf4a299ef3e1945a015ffa12a1812a06e2e87fff7e1a56241525e30304
SSDEEP

96:nARNsPYjodgH+qOdDx2xEM2/YSCyAvs2:0qGHS2xEM2/YSCyQs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f0770db0a9b8784b44b0675287ae3e31_JaffaCakes118

Files

f0770db0a9b8784b44b0675287ae3e31_JaffaCakes118
.exe windows:4 windows x86 arch:x86

516e10bc7c7d951efdc8db248cda152a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord667
ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord713
ProcCallEngine
ord570
ord100

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 724B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ