0cd4b57f4b49f43f965f6ac30081ad0a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0cd4b57f4b49f43f965f6ac30081ad0a_JaffaCakes118
Size

32KB
MD5

0cd4b57f4b49f43f965f6ac30081ad0a
SHA1

8d9c16873e3eef253742fd69c006887f7890cecf
SHA256

7ecd567255a6c551c811d8fd11c914765bcd715da8fd991c3c5a2db6b08245cc
SHA512

3b898d3396a5a7541cbf0bcf8356e6d167f1b7482898ad518ef35251e684a29b7dfc4c61cb7b6cc6f6f3b25e38721cdb904f4a4597076ac9424db0aae6c68be2
SSDEEP

192:GB+6mOfKm1jTOiMKistiHKiMKiMKiGaiMKiMKiMKiMKiMKi6piBeistiFsiSpiMC:GB+fPmjM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0cd4b57f4b49f43f965f6ac30081ad0a_JaffaCakes118

Files

0cd4b57f4b49f43f965f6ac30081ad0a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7ae3011ff2630065abb80ce73a8aeffd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord518
ord598
ord632
ord526
DllFunctionCall
__vbaExceptHandler
ord711
ProcCallEngine
ord570
ord100
ord616
ord581

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ