3c4cdf690011935dec4443e076dcb188_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3c4cdf690011935dec4443e076dcb188_JaffaCakes118
Size

124KB
MD5

3c4cdf690011935dec4443e076dcb188
SHA1

761bc7e1ba2cfadd427e59db5c705151304fc0e1
SHA256

15b9fa8b1043366841bdd76957508fa730bffc2e4a275e05c084b83517435490
SHA512

eafebda4595fa19e7261fe57a6db5ba7d3094b477268ded078fb983d2c754112e9b2569d0d6c6d1e4937da1c9940db8a589e8aa9f9b2c0f67d7d18955595b6e0
SSDEEP

1536:s7tkjOTQ5TU0GgAJa0P1kNmKldCMhdu8KWP/nTn8nBP9Ve+NeG0h/x:MkjFxU0GgAT92p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c4cdf690011935dec4443e076dcb188_JaffaCakes118

Files

3c4cdf690011935dec4443e076dcb188_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f544a0bdfba876b06cd3ddbdebdc2a8b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
MethCallEngine
ord516
ord517
ord518
ord519
ord669
ord595
ord631
ord709
ord632
ord526
EVENT_SINK_AddRef
ord527
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord608
ord717
ProcCallEngine
ord535
ord537
ord644
ord645
ord681
ord685
ord578
ord100
ord613
ord616
ord617
ord618
ord619
ord581

Sections

.text
Size: 100KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ