c1d1799f8a77a67bd8c4e6b9298d864d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c1d1799f8a77a67bd8c4e6b9298d864d_JaffaCakes118
Size

1.2MB
MD5

c1d1799f8a77a67bd8c4e6b9298d864d
SHA1

f72a2c398299247e0a982a6421bb182326edbb37
SHA256

6ae6a30040f31e5ef644423867289b6027d250c4386a2fc64e08c2c171c2957c
SHA512

d7ae5b67c05ed317208885db510674e7857c085207bd14699b0cc12f8f50eda712df5aaa3fbe5f0727944c30a25b936f7cb5af74a47461a2a8b384965a83ae7a
SSDEEP

3072:qb01MfLC3FLYMjbw3RtCi447MeAxQ0Kgxw5lB+OQFdIqs19IM39ARBwPqepFqycp:31a9a1tX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c1d1799f8a77a67bd8c4e6b9298d864d_JaffaCakes118

Files

c1d1799f8a77a67bd8c4e6b9298d864d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2afdd4f403a3ad64c6c4adbe1d38a60b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord628
ord665
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord644
ord100

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ