4c53de964fb8fc1334d51bcb37ab301d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4c53de964fb8fc1334d51bcb37ab301d_JaffaCakes118
Size

64KB
MD5

4c53de964fb8fc1334d51bcb37ab301d
SHA1

e6f3c0b157684f1e3d79543a119b6729c895e138
SHA256

9c4df51dd9374d0246b8a9df6d500cedd8d860052da3d9347a5848b62758f987
SHA512

0683aabfd4c51e4150aef521ccc9f3f42e26cbf8c1a46c8ee3b7926ba5901d4c18b126e8752225f91efca3f4ec6a34e795c345d05d0339817d0880fe43425cfa
SSDEEP

768:NatGPcv6McEkxPHTliYwqqO7mV3akLbwBY11D:N1vvEkxPH5AO7cakf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c53de964fb8fc1334d51bcb37ab301d_JaffaCakes118

Files

4c53de964fb8fc1334d51bcb37ab301d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8bf17b6db49e92b21fadebe8837307a9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord631
ord632
DllFunctionCall
ord600
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord644
ord100
ord616

Sections

.text
Size: 56KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ