fbce4cd721f7b7ad884f3797a6099f12_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fbce4cd721f7b7ad884f3797a6099f12_JaffaCakes118
Size

20KB
MD5

fbce4cd721f7b7ad884f3797a6099f12
SHA1

ce2dcf0b614d681272adfa4b5ffc32abd13c9d79
SHA256

685a7121201caa0818ffea87ac8d0b2b43dea66ee6cf238ba1df301b86e4d1d8
SHA512

3b68d48b936d85cc7d0f5021de83ee9e21e58dbacb8c138e62253b25024ef9290b20664e636c139f88b4c6b45db984515d34536ae4ceba387a553568b1617747
SSDEEP

192:dps84DA19JH6rfZQ6wQPtKkgwXEUAq7jeGWsjCB+XE2:d54iHH6rRYuKz5WX5e+E2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fbce4cd721f7b7ad884f3797a6099f12_JaffaCakes118

Files

fbce4cd721f7b7ad884f3797a6099f12_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f9c070efb1bbd7b089fa4ec28c4e6215

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord621
ord516
ord626
ord666
ord593
ord594
ord595
ord632
ord526
ord528
DllFunctionCall
__vbaExceptHandler
ord711
ord712
ord608
ord717
ProcCallEngine
ord535
ord570
ord100
ord616
ord617
ord619

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ