3c1d6ff5d26c28b6d5f55597c024c187_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3c1d6ff5d26c28b6d5f55597c024c187_JaffaCakes118
Size

60KB
MD5

3c1d6ff5d26c28b6d5f55597c024c187
SHA1

b8e2ed8606eb491784489b83248f7b4ba0fc0d11
SHA256

ff47ca6fce4f4065a67902f23defc193c4bf017c188c2521a833d39632ce1ab2
SHA512

c3ed119a4756eba8bb14250da971a819c2e5e98ee1c4daac5585b96c29928555a803569109f0d14b2d621e1ba3c34b5f854d549b77cf5dff657203faab7cb426
SSDEEP

768:wN/3gr/5eWldMGKNclQAvFqK0LJBzPVb3b4jAiKfG3AO8WBD4VaMyNaT4JHX4PcI:w2L5Dd3l/A7dG3PB4VWS4J3p+H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c1d6ff5d26c28b6d5f55597c024c187_JaffaCakes118

Files

3c1d6ff5d26c28b6d5f55597c024c187_JaffaCakes118
.exe windows:4 windows x86 arch:x86

94e0a306df94af076979b05f96a19865

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord593
ord594
ord631
ord709
ord632
DllFunctionCall
ord600
__vbaExceptHandler
ord712
ord606
ord607
ord608
ord717
ProcCallEngine
ord537
ord570
ord685
ord100
ord616
ord617
ord581

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 724B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ