3c60b9d5754caec95e2c970ff6bf0d35_JaffaCakes118 | Triage

Sharing

General

Target

3c60b9d5754caec95e2c970ff6bf0d35_JaffaCakes118
Size

20KB
MD5

3c60b9d5754caec95e2c970ff6bf0d35
SHA1

590aadb4b01cf4353c1713bfe0b16628b755871d
SHA256

656e67cb3fa4ef28b272ddacd2c3aa64a76eea4249222f78511e4a5a4d98c122
SHA512

fa77921d8ec890aea7e1bbbec8f74602e8191d2913dac4562fed334c457ab93b1e093461de169713f9b908a7bc04f0d0cadafb159ceae9a68b74ca8136c56403
SSDEEP

192:vbeCd3wqx4UVGWZ+Iq014GeMQcZjUhWBG93hJh6WaB19kxUaEomM:1Oe4UnNq01LRvUGfaMM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c60b9d5754caec95e2c970ff6bf0d35_JaffaCakes118

Files

3c60b9d5754caec95e2c970ff6bf0d35_JaffaCakes118
.exe windows:4 windows x86 arch:x86

061ea372ff79e2ed21ad36a32dba6a15

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord621
ord516
ord517
ord518
ord631
ord632
DllFunctionCall
ord601
__vbaExceptHandler
ord607
ord608
ord717
ProcCallEngine
ord537
ord570
ord100
ord616

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ