0d1e13744acc22f99d0d104b338b5774_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0d1e13744acc22f99d0d104b338b5774_JaffaCakes118
Size

24KB
MD5

0d1e13744acc22f99d0d104b338b5774
SHA1

bb4642713796a41fc045a0c54dd667a920f11d05
SHA256

712c1a3e17ed3e6266fc9c30356897af6547bac969f9d147efdc48f36e606cb9
SHA512

19ca1446ae94233234d04a9a5cc9699a3e45b715fa46faaa2b70278804ae18dd3f691436968982cce12039b5b99a9cd6b2a761b8b75d4dd1de4988abe2016e6e
SSDEEP

384:b6jfRglGj6pkCqOM/hSGDEG4+IpR4dZ7eABMh:bQfRSGCqr/hnDB4+IpR4dZ7ecS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d1e13744acc22f99d0d104b338b5774_JaffaCakes118

Files

0d1e13744acc22f99d0d104b338b5774_JaffaCakes118
.exe windows:4 windows x86 arch:x86

591ea16657c71a06aad5fff763eda4af

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord667
ord595
ord526
DllFunctionCall
ord600
__vbaExceptHandler
ord711
ord716
ord717
ProcCallEngine
ord570
ord576
ord100

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 756B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ