3a959030b5b6b8364b0bbe6c482a96b3_JaffaCakes118 | Triage

Sharing

General

Target

3a959030b5b6b8364b0bbe6c482a96b3_JaffaCakes118
Size

16KB
MD5

3a959030b5b6b8364b0bbe6c482a96b3
SHA1

2c4b311e98c9a9eaf73ce7558b6a84f89429230e
SHA256

52c6f914156e125608c88b98a6c6eba888cf4786b1b79571c057d180cb4be009
SHA512

424db0cbfc08f281aeb436d5f39dc38f072d44d9b7c88aa4f7acbd1e58986d13ddbf838228fb4cbaf070beff3c80b7c2ccdcc58d989f7a615df0f9a5f1759977
SSDEEP

96:Fa9MMDYCweROV1kuVFmEAUiMtrIn/DdQNC:4MAvOV1bX2nJQNC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a959030b5b6b8364b0bbe6c482a96b3_JaffaCakes118

Files

3a959030b5b6b8364b0bbe6c482a96b3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ae412ed9d50f0e004aa5f90efbfe72df

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord666
ord667
DllFunctionCall
ord600
__vbaExceptHandler
ord711
ord607
ProcCallEngine
ord570
ord681
ord100

Sections

.
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.
Size: - Virtual size: 844B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 4KB - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ