460dbcb43041c38b38609f2737b2388e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

460dbcb43041c38b38609f2737b2388e_JaffaCakes118
Size

88KB
MD5

460dbcb43041c38b38609f2737b2388e
SHA1

0fa4f055a3ba2cc065829e3ba26256aaa8c2d8aa
SHA256

b62b4715997146b5726706b8290682acd5efab53b0c266dde043563941cff5d9
SHA512

714eca16e6987e3d3458a5897a425142e529c10e18daa732fada9de2f4924f990cbc5e1418c95d5a54fa254f7524ef9e2c5b37bd0dbff37f7cfc5d3684aa48f6
SSDEEP

1536:ppZqgEUdUsyvIyWGgXQAKkOBY5GCz4Z6wKDOFJGUzOZGX+8HxlaoBK8:dqiE944EtU4GTaoI8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
460dbcb43041c38b38609f2737b2388e_JaffaCakes118

Files

460dbcb43041c38b38609f2737b2388e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ebb70817973de1846e5125e5bca3b9ee

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
ord696
ord516
ord517
ord518
ord520
ord631
ord709
ord632
ord527
ord528
ord529
DllFunctionCall
ord670
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord717
ProcCallEngine
ord535
ord644
ord645
ord647
ord681
ord578
ord100
ord579
ord616
ord617
ord618
ord619

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ