1bc4eeaa4f45b8ac87139c4a365c6962_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1bc4eeaa4f45b8ac87139c4a365c6962_JaffaCakes118
Size

96KB
MD5

1bc4eeaa4f45b8ac87139c4a365c6962
SHA1

262af74673a631082f56dac947da09369f72689e
SHA256

09bcb4abb5702b4b0849e4e91bc73ee505616840f31c970b6e5a61a479ef7457
SHA512

5d6b1b20cea8898f937a94cf81cc35a0173b26ac4a22631331f23248946e0c899ca88d1d7355ad97a75492a03b70a8adb43468f8ca3f553828e44bd36a609a2c
SSDEEP

3072:zZU2q4HMfG3RTWXcEoHun2BiwL9DufgNCK0:zZg4H3RTWE9Er3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1bc4eeaa4f45b8ac87139c4a365c6962_JaffaCakes118

Files

1bc4eeaa4f45b8ac87139c4a365c6962_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8269746f9ebb9c906782a0e23b5dbc9d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord644
ord570
ord100
ord616

Sections

.
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ