364f3dfa6ff1db86c350c1631593c0db_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

364f3dfa6ff1db86c350c1631593c0db_JaffaCakes118
Size

316KB
MD5

364f3dfa6ff1db86c350c1631593c0db
SHA1

f9ddc28f13204233a4a2b9fbb1bfcf27d69441a3
SHA256

23abc58803473096c7ff0c12b1236e4573d7205f65495c9b71892158f755e0ef
SHA512

80953db45cdd3e62a4ae56af0a6093eb1ffc0c9dc9c42fa94122bcf4e0a7d6f4a64c216e09796016d2866f074aaa4053048d56029001e24cd643fcacd9e3da2d
SSDEEP

6144:aqSbuktMui62qUsSl/RkDQ52ofGsPsc2u1hE9MH+kkudZXvGDjNqo8EYCff0N:aRRtMY2qTQhcfMsvuE9X1uGl81AfQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
364f3dfa6ff1db86c350c1631593c0db_JaffaCakes118

Files

364f3dfa6ff1db86c350c1631593c0db_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cd74c16e19de02339ba1d593de4c426e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord666
ord594
ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord713
ord606
ord716
ProcCallEngine
ord537
ord570
ord100
ord617
ord619

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ