3cc61177d2caf83dae9625f80d24f59f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3cc61177d2caf83dae9625f80d24f59f_JaffaCakes118
Size

52KB
MD5

3cc61177d2caf83dae9625f80d24f59f
SHA1

26da6b1147306f2c67982a6052362fed50e2bc05
SHA256

f3786a2919ad440cb442b87dc14ecddde4f6e988c4247b995dcd80b486bf44ff
SHA512

e7d747bc549fb063135a0ce670f0b886ea124108e50064e001613c6bbd2e55a7bacc530c2d267dc4d590d1f021f4464614bbfba395c749dec2dccce0814efd3c
SSDEEP

768:2yP0mzpASojkYHpJ0aBXh/ve1BAilgZOPFqUsEPzHkEoeDehkr:HQjjHpJVYdlPE0kJeD8kr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3cc61177d2caf83dae9625f80d24f59f_JaffaCakes118

Files

3cc61177d2caf83dae9625f80d24f59f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4674aa1054266cb6d88f8b15794374a0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord518
ord626
ord666
ord595
ord632
ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord608
ProcCallEngine
ord644
ord570
ord648
ord100

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ