3b6cbb80bb1c9f7b78c0966340938ea5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b6cbb80bb1c9f7b78c0966340938ea5_JaffaCakes118
Size

76KB
MD5

3b6cbb80bb1c9f7b78c0966340938ea5
SHA1

8c7553a86b3b973c23b693560463352d1e96fa35
SHA256

f7636af983eb51521247e35d577f24ff9f079b3a7fb396053fc7bf500abac054
SHA512

5c6b7685e91416197b08bc97188e98b1b3c02253b619be9842a0b22c2b5062e6c9cd18b4def70da701813c8531631bccbbe9549a2a38d6ade8ded1bb7bf76d4d
SSDEEP

1536:cx1dC1dlrWDzj4LQ2Vp73Lxxkq8Bqel7Ci1dCY/riMGav:S101GDzj4LQAL1S2eLiY/J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b6cbb80bb1c9f7b78c0966340938ea5_JaffaCakes118

Files

3b6cbb80bb1c9f7b78c0966340938ea5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ec7d6d792151e318b7730c48b2572fc8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord632
ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord570
ord681
ord100

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ