dc4d07084ee720a82452aa2dec8a8778_JaffaCakes118 | Triage

Sharing

General

Target

dc4d07084ee720a82452aa2dec8a8778_JaffaCakes118
Size

168KB
MD5

dc4d07084ee720a82452aa2dec8a8778
SHA1

c9c3a75320e75f05202a890f98423e17f3fb074f
SHA256

cfb84bb75be3f374dbadd4dcea7be32a9df28616a9583a99b67f7e9fe6f4c670
SHA512

100782e7b827aca214fbcc055bf20fbff76f2be4552183b3b21d6ab80eaa1524f821be3d0cd6e3b64325265b8adfbdd85cee96639068b91178128fc8bae67910
SSDEEP

3072:RpK0IUZFH6PZvBmMz0sNPr5g5wphaKJEO:RWtXTe5wphaKE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc4d07084ee720a82452aa2dec8a8778_JaffaCakes118

Files

dc4d07084ee720a82452aa2dec8a8778_JaffaCakes118
.exe windows:4 windows x86 arch:x86

103b9be8176dcaaad37e2d3edad7c116

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord582
ord583
ord587
ord589
MethCallEngine
ord516
ord519
ord660
ord591
ord595
ord598
ord520
ord631
ord632
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord606
ord607
ord714
ord608
ord534
ProcCallEngine
ord535
ord645
ord648
ord573
ord681
ord685
ord100
ord613
ord614
ord617
ord619
ord650
ord546
ord581

Sections

.text
Size: 160KB - Virtual size: 157KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ