b3f1ef4eab90b60273b2847d49d2600b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b3f1ef4eab90b60273b2847d49d2600b_JaffaCakes118
Size

324KB
MD5

b3f1ef4eab90b60273b2847d49d2600b
SHA1

1e6e2d713380f80da6c685c48163195341a1de67
SHA256

661ab94e3233525855ad25f1b98f0ceff987647250906c120d9c67e99d4cfc8d
SHA512

f027c24f6a882b16ac6ca324df937429a82fc617f9ab30ac8620b14a05b207d69e1c340787bf0d2be8ebb25de41d2c6954503b6052c55a8f27bcea509ec46b4f
SSDEEP

6144:Ry7s/RhP1GHqzCG1vTJ2BwpBnKB+fhGcs3x4tiBC1DwBaYW5:Rj/HP1GHKb1bBKgfsVBC1EB+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b3f1ef4eab90b60273b2847d49d2600b_JaffaCakes118

Files

b3f1ef4eab90b60273b2847d49d2600b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d911aba2224dee0b31f74472979efc0a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord626
ord632
DllFunctionCall
ord670
__vbaExceptHandler
ord712
ord608
ord717
ProcCallEngine
ord644
ord100
ord616
ord617

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 304KB - Virtual size: 301KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ