342c5bc69f4d9ebfe6082302cf1c4143_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

342c5bc69f4d9ebfe6082302cf1c4143_JaffaCakes118
Size

52KB
MD5

342c5bc69f4d9ebfe6082302cf1c4143
SHA1

43af34496322205a3ad4b53a3f87a695e34c9ab0
SHA256

6f2136ba473d63e141fb8a872edf0c1faf79f144d913bd9743e23c7a0d6659db
SHA512

1d4fa5693dba6457db03c4dd06dfb6ebea5eca497bfa279fb4c939a50a633cf97008547e7c9f22d8c38640a3e5586e2363a3a4d67ce5fc0b25b1543e2dc11dcf
SSDEEP

768:EN4TbF1saEWNO+q63GC3HHDiBh8GwUoRnj58ggbsBYWriGVFhHYYQfqd2fWZ:2r2HHDQwHR9+oxrbfhhQkzZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
342c5bc69f4d9ebfe6082302cf1c4143_JaffaCakes118

Files

342c5bc69f4d9ebfe6082302cf1c4143_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1c9ccfedb9df52177f792c92b79204d1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord518
ord626
ord666
ord598
ord526
DllFunctionCall
ord563
ord670
ord601
__vbaExceptHandler
ord711
ord712
ord607
ord608
ord717
ProcCallEngine
ord644
ord645
ord100
ord616
ord617

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ