4cd22192a8db9d07ffe4407eebbd6f5e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4cd22192a8db9d07ffe4407eebbd6f5e_JaffaCakes118
Size

228KB
MD5

4cd22192a8db9d07ffe4407eebbd6f5e
SHA1

2dc06687a63ae89ae56657546c2738c87fd0f7d7
SHA256

960c5c9a77392d11e862f6c2cda1ee123206402b2d70bd79802c0d5606acdd9e
SHA512

acf50bf1b9ac3072dfb165d14ec49dd4f8a878aa1ba078e833946661f2001f6462c796e37db99cc639a820072be6ab214af925620830fab4eb34dd9cf625aaf7
SSDEEP

3072:YQM1Ny0aaewWdd0h5FT9k85W0eM64VSP2S:u10mWddO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4cd22192a8db9d07ffe4407eebbd6f5e_JaffaCakes118

Files

4cd22192a8db9d07ffe4407eebbd6f5e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

55775fa8fbcb2a5e70ba307333d3c388

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord598
ord631
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord713
ord717
ProcCallEngine
ord644
ord537
ord648
ord570
ord572
ord578
ord100
ord581

Sections

.text
Size: 220KB - Virtual size: 217KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ