3bba3fc026be8107920115a80749ec28_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3bba3fc026be8107920115a80749ec28_JaffaCakes118
Size

36KB
MD5

3bba3fc026be8107920115a80749ec28
SHA1

d469bc3778267d57d711619d6fb7bfefcaa90344
SHA256

737741088f9d7a8107dda75ca5bfadfd4b104cde5e5c801143335c7287e5d437
SHA512

ecef17d35a4bfaf2e7739dc967f3d4b76c8af6014083ef7f7d20cb8e58ad88fd0c60409211082c56312c4163794d6a565b25d65418f9cbcf467fa54a20f22445
SSDEEP

384:MYuTUveZTTUvjZJTUvppi8WbnEpzfDZHjTUvZPKMP9K/HKBRKNPeaMO:fuTfZTTKZJTUA8IW1DTOKM0CBoNTX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3bba3fc026be8107920115a80749ec28_JaffaCakes118

Files

3bba3fc026be8107920115a80749ec28_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c6d578f0f7cb5e7a7830285b16654e36

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord666
ord631
ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord712
ord607
ord608
ord717
ProcCallEngine
ord644
ord537
ord570
ord573
ord681
ord100
ord616
ord619

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 980B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ