3ad5790cf33285a3b5a1230ab8411b5a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ad5790cf33285a3b5a1230ab8411b5a_JaffaCakes118
Size

16KB
MD5

3ad5790cf33285a3b5a1230ab8411b5a
SHA1

155f290d7478e39b7b5913948c8c7426ca6f69e5
SHA256

2c7af2260730cd2f2eb94eaee97ca6d8ba2ace3d4e023099d20a20b501bba6bf
SHA512

0f1693904ec3e0f79bb6aa0391e1e8aa5abaa9f71c6aabac824d2e0196f18d26286af5d03c8029416d018c3a4798bc15e217a9fec20da95048ddb8f21c5666c8
SSDEEP

96:HPHcCAFEdy7K2nua2pUa+sMweoqrv0uLSqGP++SkHSvldZIhekEDCnfTzGRxk6k2:v95D4uaOb+sCPE8DI1GRDk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ad5790cf33285a3b5a1230ab8411b5a_JaffaCakes118

Files

3ad5790cf33285a3b5a1230ab8411b5a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

168fc3653a74f320b400e0a6c1d52699

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord631
ord632
ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord713
ord607
ord608
ord717
ProcCallEngine
ord644
ord573
ord681
ord578
ord100
ord616
ord618

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ