4ac58c30f28c180d692420d527b3c790_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4ac58c30f28c180d692420d527b3c790_JaffaCakes118
Size

47KB
MD5

4ac58c30f28c180d692420d527b3c790
SHA1

aea8d06ac2e22d0522f755c30ed2f210c7f94f3b
SHA256

31c12276f87096f27c8e229d4b6f2583ee9dcb54f4749f0dc446ef664cde9f1c
SHA512

00c530b4b2fa2ff8f74d44cdb08d3d780415c87de950a4b45f7d5c68d54cc1c10956a31bbaa95e8d77ba5b9c086333e65528d6336a1774e0da0cd5d626b13938
SSDEEP

384:YoTYGTjuBa2DfMgWVEtAWfgJnAKkcDrDmyqNp/f41:Ym5Tj8xjSAvYm3c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ac58c30f28c180d692420d527b3c790_JaffaCakes118

Files

4ac58c30f28c180d692420d527b3c790_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4b0c8e9fc721d0cf3a17360ae83d7925

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord632
ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord570
ord100
ord616

Sections

.
Size: 10.6MB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ