fb5fb3eb38f8775594cbaa180b229aaa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb5fb3eb38f8775594cbaa180b229aaa_JaffaCakes118
Size

156KB
MD5

fb5fb3eb38f8775594cbaa180b229aaa
SHA1

9aea8cab2df707a19087e8de101183ea94c566ae
SHA256

f3145e6e7c6f9159eb88e5b47dca69eb2f3956d64ecfb60fc1c3bf8be5b66ee3
SHA512

7ffb6b239c0b7dc286d63dd5ca847cbc6988537c742849d5cdd9d65eeb34ab42ae55e870b7cc7ee6cf1c5a0405a25b8de70fd054406c8d538610e54084441722
SSDEEP

3072:1tKloQSrkKgRENEI5apGTwQqVMTW0hiJDeawA1Kx:19A1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb5fb3eb38f8775594cbaa180b229aaa_JaffaCakes118

Files

fb5fb3eb38f8775594cbaa180b229aaa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e7dea642127d9735a3a9dead67823cef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord665
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord644
ord100

Sections

.text
Size: 148KB - Virtual size: 146KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ