1c493147a0e5befcb289c9b03445f09a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1c493147a0e5befcb289c9b03445f09a_JaffaCakes118
Size

388KB
MD5

1c493147a0e5befcb289c9b03445f09a
SHA1

a2b0747fba689726fa9a3c7abd7ebba163e6567c
SHA256

cef7fa7004b56e8d805c1c7857d74d9fd2c4c6cb1cd9ff22a0c91e0e0a936916
SHA512

057ca138a170afaf75f132a4a19eac4f6cdfe796242a1e299f102f3bff5babcf7b01e28ef98c303556cda97f5fd3f93a2676db977c531ece0a96c61e3babab13
SSDEEP

3072:UNotaae0bKFzDK++18r1aO1EjvmtDuILOb+ZqeBRhem7uRszm8+C2WZoIx6Thnzs:Ko2J0fyVeGzm3fLpdbfBVbu7j6W+Kz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c493147a0e5befcb289c9b03445f09a_JaffaCakes118

Files

1c493147a0e5befcb289c9b03445f09a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5d7045b81b4fadd8bd4e7cc654841baa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord519
ord662
ord595
ord304
ord598
ord520
ord631
ord632
EVENT_SINK_AddRef
ord528
ord529
ord561
DllFunctionCall
EVENT_SINK_Release
ord600
ord310
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord312
ord606
ord714
ord608
ord717
ProcCallEngine
ord537
ord647
ord572
ord573
ord681
ord685
ord100
ord612
ord616
ord617
ord619
ord546
ord581

Sections

.text
Size: 372KB - Virtual size: 368KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ