c10c33798ce0f68d520ce055bb72ecb7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c10c33798ce0f68d520ce055bb72ecb7_JaffaCakes118
Size

284KB
MD5

c10c33798ce0f68d520ce055bb72ecb7
SHA1

a64e81d74cbab3ef6aa84c1f9c81eed9be67576f
SHA256

87903c86bb9761e10321febf8af5feec88086bbe73ccf8ca52f6e3fd3a9d6604
SHA512

e3135f331a7d56b54c7e30e0eeae94c6c54e95ba36ee082b5e9ca247b2ef20e9a8aeefee1fda2588f0a145af3d6bcc5af70623397542e07efb0d0941c136561a
SSDEEP

3072:h6Lca+56U04mw49Y3r1suFiEIN1suFiEIAO1m1TPF:tzFByzFBK1m15

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c10c33798ce0f68d520ce055bb72ecb7_JaffaCakes118

Files

c10c33798ce0f68d520ce055bb72ecb7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

49fc08656f9ffcf7a0fc294258ef56bb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord628
ord665
ord597
ord599
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord644
ord100

Sections

.text
Size: 276KB - Virtual size: 274KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ