dcd8dcd7177da22f41f8fe8c2acb3a9d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dcd8dcd7177da22f41f8fe8c2acb3a9d_JaffaCakes118
Size

300KB
MD5

dcd8dcd7177da22f41f8fe8c2acb3a9d
SHA1

4620fa5d8ed31d6ce734561b0a28fbc64f587bc7
SHA256

e427765916b9ff02793d851e6cc65093b93eacdd1a9e4b41410b92c2b10c668b
SHA512

8d1b33f8ef1963105e587302b4ed13dde64f8c29af9d88c221f3c4d2463e4cd8d158c734ca6295ac5c7ab07aff3f3eee3e95aaa6a007f31d2ff68ed8cd40ffe3
SSDEEP

3072:2Yu0t6ndFaBzttFpADIG/U2qoQMy4SqzsOaanqatawaaaaaYm5tB1RY:xrtB1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dcd8dcd7177da22f41f8fe8c2acb3a9d_JaffaCakes118

Files

dcd8dcd7177da22f41f8fe8c2acb3a9d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f497e8fdafdf03bff86da8f9623a9186

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord665
ord598
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord608
ord716
ProcCallEngine
ord644
ord537
ord681
ord576
ord100
ord616
ord617
ord619
ord581

Sections

.text
Size: 292KB - Virtual size: 290KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ