Overview

overview

10

Static

static

8

cav3cab.dll

windows7-x64

10

cav3cab.dll

windows10-2004-x64

10

info_03_03.docm

windows7-x64

10

info_03_03.docm

windows10-2004-x64

10

run.bat

windows7-x64

3

run.bat

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    3ba3d648ca74d5bd772f483c4a9d22fd_JaffaCakes118

  • Size

    764KB

  • MD5

    3ba3d648ca74d5bd772f483c4a9d22fd

  • SHA1

    c2de8076341421ddbc42dce2421b55eef65cf7c4

  • SHA256

    dcf378c464b7206e115e6ca75db611d0139eac32efe516843f30e8f7081c6b4a

  • SHA512

    956449e72ba7599ba28b71b9ac9ebbe0e8086953f5290e5394b3c299878841d1aabbb4364675b8352815508f0c8d40796542eb8c15b242349611230de14cf613

  • SSDEEP

    12288:1g85EoktIBKProGyVqaybmLp9N2dWELilk1EdKdf1t+dNyysAtqzq3GLX+X4Dg:e8J6dProG+qayC12PLmDdqf2doys4qG3

Score
8/10
macro

Malware Config

Signatures

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

    macro
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3ba3d648ca74d5bd772f483c4a9d22fd_JaffaCakes118
    .zip
  • cav3cab.dll
    .dll windows:6 windows x86 arch:x86

    01d4c49b7df9a276ec8cc7775d9e5de9


    Headers

    Imports

    Sections

  • info_03_03.doc
    .docm .doc office2007

    ThisDocument

    acK3g

    a8THa

    aeqzv

    frm

  • run.bat