4cbe7781c9cdc563cb3b5b66fc3134cf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4cbe7781c9cdc563cb3b5b66fc3134cf_JaffaCakes118
Size

544KB
MD5

4cbe7781c9cdc563cb3b5b66fc3134cf
SHA1

f9862c0ffc2b11d95e8636d7889f540aa3bdd389
SHA256

e4d71bb5a2d97d6c90087c8d2cf187349fe97bc17e8e0b9156a0a628158ebf97
SHA512

a41528a37737800d6d02b1baa02250a6d3d4ddef7f007d59c6123dff7a14619a42886b89c67c11cd683d6f91e2831b0d7fdcb996dfb881ba5b09a973b00133ee
SSDEEP

6144:RSz0td9idwBUsfH8aUoU4JjHt2DmbyLRTaG6F37TG92as9ht72VzCylgWovYGvOJ:k4td9idg0OU4bylaQDKhtCV2eIB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4cbe7781c9cdc563cb3b5b66fc3134cf_JaffaCakes118

Files

4cbe7781c9cdc563cb3b5b66fc3134cf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bcd77d33a4e1cee55f2c124644881305

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord593
ord598
ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord713
ord607
ord608
ord717
ProcCallEngine
ord644
ord570
ord100
ord616

Sections

.sasa
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.asaa
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.asas
Size: 528KB - Virtual size: 527KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ