3e2ff294df5e3ca8f595a2bdcb5d060c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e2ff294df5e3ca8f595a2bdcb5d060c_JaffaCakes118
Size

16KB
MD5

3e2ff294df5e3ca8f595a2bdcb5d060c
SHA1

894d1a951a592daf18d1a89361fc5e89b7025c60
SHA256

f41f8a595c6cb843c15293e21111fec22f9f152f90c9cc63d7c9582009ce2319
SHA512

2f49e6d962115b3a488f2d1d8cc6b7ee913c3512f51426589b3290a9b9d3f7a405c9b89e341c943e8b8e1fc357a5eb5fd53d5c62911d3674c8fb832446654639
SSDEEP

96:KlOXsF/VTh3nLUdOiL2j85DyPGh0gr7QDX8OEa2:Kco/VTh3nLGw85DyS0grsDGa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e2ff294df5e3ca8f595a2bdcb5d060c_JaffaCakes118

Files

3e2ff294df5e3ca8f595a2bdcb5d060c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

09fcc4a0ea8ea6b6941e3392cc3ee727

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm50

ord516
ord598
ord631
ord632
ord526
ord529
DllFunctionCall
ord600
__vbaExceptHandler
ord608
ProcCallEngine
ord645
ord570
ord578
ord100
ord617

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ