309a3d91a88345dd7119e9245c8b27a6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

309a3d91a88345dd7119e9245c8b27a6_JaffaCakes118
Size

330KB
MD5

309a3d91a88345dd7119e9245c8b27a6
SHA1

9e0e117092a9f13cb68b6ead7acc97a1b2b769aa
SHA256

cdd0b08121271fe42a43dd45344f7006f1df6230c86338fb5d4f9439d036acfe
SHA512

d3d0185aa0ce57c8de45529f65689a78018bf00632ec931ee11a4e823d15e09c0cab8fdf7f2a9576ec3b325eabd71c3438373a1a840a6981c3ffa2886b937154
SSDEEP

6144:iOAv69ceJZkAcdiXPCCYJ9fb4VKBm+GuQurr0EL4lgaIXqZkCngaOGk:iCDc21YfcVKBmeQ+2ma2q7g5Gk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
309a3d91a88345dd7119e9245c8b27a6_JaffaCakes118

Files

309a3d91a88345dd7119e9245c8b27a6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

27bc381bd8908da74868be7861d263cf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord666
ord593
ord594
ord598
ord631
DllFunctionCall
__vbaExceptHandler
ord607
ord608
ord717
ProcCallEngine
ord537
ord644
ord573
ord100
ord616
ord618

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 828B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ