3f4847dbce700dd5872f7c60fe045e87_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3f4847dbce700dd5872f7c60fe045e87_JaffaCakes118
Size

36KB
MD5

3f4847dbce700dd5872f7c60fe045e87
SHA1

59901621e6433718046dbf0ea200a06aff21ae20
SHA256

a9773128491cb11d04f23bee0fa13baa2a0feda2861cc555cac33c3556f38c8b
SHA512

6af508bf004f57c44f583100df752e7f178829c0ef1723c6eadb461e25faeee517e34f8d1bea23aa1bc08049a7faf2bd85bdd7f70fcc12bc592a64b90874cec6
SSDEEP

768:t7Bj/OncHYDz30knr1+OYqIq7m5guxNQp4kaClwQx:xRBbOYqxq5geNQ+kaw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f4847dbce700dd5872f7c60fe045e87_JaffaCakes118

Files

3f4847dbce700dd5872f7c60fe045e87_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6df9135b595bcd49f8e4b71b0ecb5db3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord626
ord632
DllFunctionCall
__vbaExceptHandler
ord712
ord608
ord717
ProcCallEngine
ord644
ord100
ord616
ord617
ord581

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ