4bc10bf62012cf77bad923f66367f2f9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4bc10bf62012cf77bad923f66367f2f9_JaffaCakes118
Size

116KB
MD5

4bc10bf62012cf77bad923f66367f2f9
SHA1

6b6716ed4932a4a639501a0ae5e409f4349ec188
SHA256

7629fc8ba174aefd2862ceaf5a81c5c1cdc65421369597e794050b886c47d7e9
SHA512

4065cbbae6bffb8f7fdfb55cf1b864b91131b03868c6c29ecb1d1e4919adb9204fc555db50baeb93daead06fbdadaff92e9ebd8b710b6aaac984860248a0fedf
SSDEEP

3072:FTHMFeH4l1ClYo0chZ9QDw7xcQy6r4G26fEOSwPdWRrTPIPsPWP0lIPNI7ZLU6:RL4WlLW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4bc10bf62012cf77bad923f66367f2f9_JaffaCakes118

Files

4bc10bf62012cf77bad923f66367f2f9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a9bc04e29780f70d67c333157b6553ec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord595
ord598
ord525
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord608
ProcCallEngine
ord100
ord616
ord581

Sections

.text
Size: 108KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ