fcacb6134b78d01fd918cc073c817d95_JaffaCakes118 | Triage

Sharing

General

Target

fcacb6134b78d01fd918cc073c817d95_JaffaCakes118
Size

20KB
MD5

fcacb6134b78d01fd918cc073c817d95
SHA1

e555cd105d79b90a0003305967c6fa67d43c5981
SHA256

430f2a2f2641df9cf51d5b2a3a139a05f75c39ccc46daf146faf7fcbccfe60cf
SHA512

242865b857065d64c7d015c5915772905e702f0a043257075bd5b7659df02f409f7ccd10fec0d9ba2b85e7a88e00e8278f4e33cf72f94d2b07cf072a4d67ac92
SSDEEP

96:VvHzeGVFdoFJ/SKrlAVDCWs+IF3drSqweqxi6FHceG0lpqKqKV58dAVDagIFBL3O:RHzXd2AVD8+IFBnxqxi6FdJfqKHCAx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fcacb6134b78d01fd918cc073c817d95_JaffaCakes118

Files

fcacb6134b78d01fd918cc073c817d95_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

4f48caebd2cbafeabf2369f26b5b3aa8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvbvm60

MethCallEngine
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord644
ord573
ord101
ord102
ord103
ord104
ord105

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 940B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ