3ef87de6ff0d65814b1abd55065b0708_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ef87de6ff0d65814b1abd55065b0708_JaffaCakes118
Size

80KB
MD5

3ef87de6ff0d65814b1abd55065b0708
SHA1

7846903fd9287d80f4de530d955746df654f5019
SHA256

d032a3d3b7b972cbd90b16185ea1a4d4f7bbdd1db1cf48836fd517fd065ae304
SHA512

0f2c5a65b9db48abd8d8604f7405c5ad708a34b34a3bb69be0045af09d4ea5c03010bfd2a749b696ebc73435c4d33c178763cf1fe369f4453eb13ab5c0e8461f
SSDEEP

768:fC/McJWLih6JA/SqSFOh4/gfaxEuUQ6Pw2sGWVvgytaRHW7c:fCkc1h6JA/SqSFOl3u8w2svvK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ef87de6ff0d65814b1abd55065b0708_JaffaCakes118

Files

3ef87de6ff0d65814b1abd55065b0708_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7c6e4258362879119c6df8759fc0fb88

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
ord593
ord594
ord598
ord631
ord709
ord528
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord648
ord578
ord100
ord431
ord616
ord617
ord619

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 948B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ