4151d2ca15f0772a454aba94cafe1303_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4151d2ca15f0772a454aba94cafe1303_JaffaCakes118
Size

107KB
MD5

4151d2ca15f0772a454aba94cafe1303
SHA1

3976fba1ff3a47d3064173e2db3a4c0c39cd43fb
SHA256

7fe84fa84cb57e8afeb26ece769c625671c3cc3db2fe9d41ba1473e80b9ca50b
SHA512

04b192ade46ae27fad33f79aa9b3d62e11fd1703dcd6a903366e3001d1e6589bcad0bb81d0d94e0724b617da0599f658ae43e73bc048510486f63eaf6311f7fb
SSDEEP

1536:l0m5AaqMln+QN1rMRCdeTJDWGBxVX/URZ9eA:vXx+pCdeTJCunXcRSA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4151d2ca15f0772a454aba94cafe1303_JaffaCakes118

Files

4151d2ca15f0772a454aba94cafe1303_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d69c6479660f6fc7022a75a7d35f4ebe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

msvbvm60

__vbaVarSub

Sections

.text
Size: 19KB - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 71KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE