3218fa46f939543d84d6f170d8c1ac12_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3218fa46f939543d84d6f170d8c1ac12_JaffaCakes118
Size

6.0MB
MD5

3218fa46f939543d84d6f170d8c1ac12
SHA1

8d8842d2e76fba0062a5759635399eb39447067c
SHA256

287989a0bc920a1621a03bfdc35a64ed4c76d1668985ceb397bfef3678974f3e
SHA512

6f58e3ef50303682c27b5e63b0895b92a574020baab025a82c06ae504a7024ebd16f85243aeb61af7bd0bbd67a889ae052ec416e4644edb2120d6e2ab8987ed2
SSDEEP

98304:opd2kkhNnNWr6qev5Wyeg05qCBKYvsbL5qtgmzMyqNMrZN+AdgXJr3V3bGc:MQkenN0feNH0XsiTzMDMVN+AdgZrlSc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3218fa46f939543d84d6f170d8c1ac12_JaffaCakes118

Files

3218fa46f939543d84d6f170d8c1ac12_JaffaCakes118
.exe windows:4 windows x86 arch:x86

630bdfd2ea9f307f752d05a6684af15a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord666
ord598
ord632
ord526
DllFunctionCall
ord600
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord648
ord578
ord100
ord616
ord581

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gangban
Size: 6.0MB - Virtual size: 4KB