3a6bd8aaa25e52c0f965929c2f8b331a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a6bd8aaa25e52c0f965929c2f8b331a_JaffaCakes118
Size

488KB
MD5

3a6bd8aaa25e52c0f965929c2f8b331a
SHA1

6598259d8e246f67342673b2292b2f0bf3e4841e
SHA256

65b7316a1ca84e41f4689f05dcec5c48028e11dac89298cc6398478998395b65
SHA512

f129703750438e5e48799c3b48d8611ce39c6346d3ed3771b9770ed772029699702a60bf6107fa5469cd25f7524b3a5e27451a2d15030e33e4900256dc80eac7
SSDEEP

12288:dJj6T/Bf6UPTGUOaPQ4ULUG3CXRBfZhHVY/9bTiJTyjwh:dpaQoQ4yUG3GvZhHVQbu1X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a6bd8aaa25e52c0f965929c2f8b331a_JaffaCakes118

Files

3a6bd8aaa25e52c0f965929c2f8b331a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5147b69a1b7fcde1e7bcf36da71618a1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord593
ord594
ord631
ord709
ord525
DllFunctionCall
ord600
__vbaExceptHandler
ord531
ord717
ProcCallEngine
ord537
ord645
ord648
ord572
ord681
ord100
ord616
ord618

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 476KB - Virtual size: 472KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ