3a1d18f310b1088acb5fc8af264c3918_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a1d18f310b1088acb5fc8af264c3918_JaffaCakes118
Size

93KB
MD5

3a1d18f310b1088acb5fc8af264c3918
SHA1

019264a3fd0077505148bf69ec3f7c20f6ef7497
SHA256

eebd642c9e31de211de6f0b4aa8d8f250fb5fbb83aa737db5b01feab9dc63d4f
SHA512

7a8719bddda91626084e130c32f3fe925d2865f0faf38450667522e2287bcf7def83fd78604f91d84d16401392467b15a5d866e0e02683775d9d7946422ba6b4
SSDEEP

1536:QZ0BHKwgjPV45qP280Fyh4CX27ZEOCkDbwiP+xVuW9ar8gn:lBHrUP3r0FAl5k3m96n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a1d18f310b1088acb5fc8af264c3918_JaffaCakes118

Files

3a1d18f310b1088acb5fc8af264c3918_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cd81becf486c9d62d6f95dee4dc59988

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord666
ord526
ord529
DllFunctionCall
__vbaExceptHandler
ord711
ProcCallEngine
ord570
ord648
ord578
ord100

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 956B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ