4cebb6be5239664753220981560079f4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4cebb6be5239664753220981560079f4_JaffaCakes118
Size

20KB
MD5

4cebb6be5239664753220981560079f4
SHA1

f1c677a494d122f012039fdc6840e1641840f43a
SHA256

b33090211bbcde1280274042a99e3064e0a50dc2dbc34afe7262d6f9811c3e09
SHA512

4fc337bb01a19124c6d94597da0c19da5771fc239cf1dc6b6b995553ac50e486db7027cdeef57874a04f5b6aaf96e77868cae1ecfe43f164c9f3a740b3387717
SSDEEP

192:8IKMGas6hALcCym5QIQe+4KPn6CPUbje5XaM:VNFYZD1O4tbj5M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4cebb6be5239664753220981560079f4_JaffaCakes118

Files

4cebb6be5239664753220981560079f4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8365ffec781de3f914d89a19788db090

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord598
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord685
ord100
ord616
ord581

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ