3c03c80d40326cec472089abe24ff15e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3c03c80d40326cec472089abe24ff15e_JaffaCakes118
Size

72KB
MD5

3c03c80d40326cec472089abe24ff15e
SHA1

969c8feb5c754d103bbd735b7dbcbf66be54865c
SHA256

652c071ca0e4e2948d9c14bc610c4ce15c520aac2d9c3a45fbd4660f1df9cb2b
SHA512

a5e70ea286187b04cd9924028ada3c39f7f168e20b746d1e76bb7b72d8aeadf732858a7046c9f9fb8d2fecef72855d4166a36c613ecb5a0a6bb1909c53d7fa72
SSDEEP

768:38XYDtIfh41ROQSRqtJ67W2990OUlOznqP7Kp7dLXfhrb2rJ30dsrJi19rcA7KRQ:nERnq/GrmdTKzLvtbukds1i17iirke

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c03c80d40326cec472089abe24ff15e_JaffaCakes118

Files

3c03c80d40326cec472089abe24ff15e_JaffaCakes118
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

946735fe418c10516f6e929f3982c919

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord626
ord632
DllFunctionCall
ord670
__vbaExceptHandler
ord712
ord608
ord717
ProcCallEngine
ord644
ord100
ord616
ord617
ord581

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ