c1e4e075026c97e236682d860a044053_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c1e4e075026c97e236682d860a044053_JaffaCakes118
Size

250KB
MD5

c1e4e075026c97e236682d860a044053
SHA1

064534266c04f9313d74542cd255b9e6e575bc31
SHA256

8f33c8dd7c3ac4a57252ef7e60d608a2a1729308e5cb6146e419db6ba249c5b8
SHA512

c2debaca4ecabfc07da5540f450392beb5aebeda6dc0c28e2a68a01b78df05b2f0077d99e9643732a80ab064329093182fc6521e3ac8adb4a299196a2df35dd2
SSDEEP

3072:A4KldGj/tm1VNDL0L/RSRDIy5lb5zGB1u17:AXdGMscUy5HbJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c1e4e075026c97e236682d860a044053_JaffaCakes118

Files

c1e4e075026c97e236682d860a044053_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5898466325b9646a6c51f94766f7cece

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
ord696
MethCallEngine
ord512
ord513
ord514
ord515
ord516
ord517
ord518
ord628
ord629
ord594
ord598
ord520
ord631
ord709
ord525
ord632
ord526
EVENT_SINK_AddRef
ord527
ord528
ord564
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord717
ProcCallEngine
ord535
ord537
ord644
ord645
ord570
ord100
ord431
ord616
ord617
ord618
ord619
ord542
ord581

Sections

.text
Size: 236KB - Virtual size: 234KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ