4c52f826b3b8a05c0c42c26953d16b3f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4c52f826b3b8a05c0c42c26953d16b3f_JaffaCakes118
Size

332KB
MD5

4c52f826b3b8a05c0c42c26953d16b3f
SHA1

e734aa6ac8d90c87eeac89e1ba4f18bde8e57b02
SHA256

c93852b7c0d06c0963d758c89fd3d9f73da5bab23087209e7dab315558ca8f5f
SHA512

66b34dca733174b4a4c2a78e7632fe4cefccdca2f2bc4832eb46c5300c88d09a0dbcbca8f89ce624c115f008f697a68768eeb9785df30df8fef0fb089328f1f0
SSDEEP

6144:vkYQ9ul3aNF6C/kBKOlhUt9kva/fcdZD8MkoohQrkJQPojyZUqDT2Wh5y58W:vg9fb6CcBV/29D/fwZD8Mko2QkagqDin

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c52f826b3b8a05c0c42c26953d16b3f_JaffaCakes118

Files

4c52f826b3b8a05c0c42c26953d16b3f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a63bfc73ee86452645d294439b583608

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord595
ord598
ord526
EVENT_SINK_AddRef
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ord648
ord570
ord685
ord100

Sections

.text
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 280KB - Virtual size: 278KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ