JaffaCakes118_4c4ea15ca81ba613741f57c2b864a9d0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

JaffaCakes118_4c4ea15ca81ba613741f57c2b864a9d0
Size

80KB
MD5

4c4ea15ca81ba613741f57c2b864a9d0
SHA1

b5b99339704994a7de47c3697b690e2b637e1246
SHA256

c51fad1833de3e2c2f9cb73c648dbf8a1abc625b4a1c820e5e2ac7ef89fe9e33
SHA512

5a2992a33cb18f266aa338d54aba0160cfc06c746c50697e34ee4fa58a1eebacf72ef374584b5bd32b25eb5827adad9529734f895e1169bbb5c54c3e6728d738
SSDEEP

1536:wylZ6wfDJz14rh05KcJMVGYgrzxhrZfFkWGq6cjT1:1Roh0Kc29iTNdkWGqzjT1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_4c4ea15ca81ba613741f57c2b864a9d0

Files

JaffaCakes118_4c4ea15ca81ba613741f57c2b864a9d0
.exe windows:4 windows x86 arch:x86

fcc7cb001c9dad6e13290c4a75054ba3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord583
ord584
ord585
ord693
ord586
ord694
ord587
ord588
ord695
ord589
ord697
ord698
MethCallEngine
ord516
ord517
ord519
ord628
ord629
ord661
ord663
ord664
ord667
ord591
ord593
ord596
ord598
ord521
ord523
ord631
ord632
ord525
EVENT_SINK_AddRef
ord527
DllFunctionCall
ord671
ord672
ord673
ord675
ord677
ord678
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord710
ord712
ord713
ord606
ord714
ord609
ord717
ord646
ord539
ord647
ord571
ord574
ord100
ord687
ord610
ord613
ord614
ord541
ord542
ord650
ord543
ord544
ord651
ord545
ord546
ord547
ord581

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ