4c90514c8d20160079d71f139392228a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4c90514c8d20160079d71f139392228a_JaffaCakes118
Size

20KB
MD5

4c90514c8d20160079d71f139392228a
SHA1

3e9309e16dbe5167264d0dd7fb7ab24d69e9ebf2
SHA256

a6467726a3d55b820e6e3f1fe19abd939ccab6150fb8be4b8b4aa348744ac5a8
SHA512

54af1491f59dbab02b08ccd7aac10fe60ddcfa0db26d5fd830a165d197f871391ed9005a82c549ebac1b5d75408ddbfe291d1ce5c87a22f48cacf20cfe6b1ef6
SSDEEP

192:pC6OnIw+jOdc6XXAP+GROF0jA3BX3rGzdDFB9/bAmlpWoaEhOn:8jlI6nkKXcr9JWBEU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c90514c8d20160079d71f139392228a_JaffaCakes118

Files

4c90514c8d20160079d71f139392228a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

acbce3a1170c13ee79032276147cd86f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord595
ord520
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord716
ProcCallEngine
ord570
ord685
ord100
ord616

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ