3a9f61d5e756efdebba3a22a692a2ccf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a9f61d5e756efdebba3a22a692a2ccf_JaffaCakes118
Size

72KB
MD5

3a9f61d5e756efdebba3a22a692a2ccf
SHA1

bc17ff11a351145c51c199c7619f01aa80483702
SHA256

165c5e339f30f500bb4ee756fdfe039bce8c9aa65317246465e9556ce401bf1d
SHA512

26475bb3d96574cc9221f7fe01653ce0ae2a8db9541e56e3d8bbe36c4ae0fc220620571a85b159d99a58d8219cc5a3c2a16e187d0bf9cbde091c622417863886
SSDEEP

1536:6Dm/G/4T7nF/LLP/7mLOxS2j4eXxogSJh:Zk4vnF/X7mynoTJh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a9f61d5e756efdebba3a22a692a2ccf_JaffaCakes118

Files

3a9f61d5e756efdebba3a22a692a2ccf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

518f01622505362fd50c71eb21301774

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord518
ord626
ord666
ord595
ord598
ord520
ord631
ord632
ord526
ord528
DllFunctionCall
ord670
ord563
ord600
__vbaExceptHandler
ord711
ord712
ord606
ord608
ord716
ord717
ProcCallEngine
ord644
ord537
ord645
ord570
ord648
ord572
ord573
ord681
ord578
ord685
ord100
ord616
ord617
ord581

Sections

.text
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ