fcf25672bb065ef740432aed9c85d577_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fcf25672bb065ef740432aed9c85d577_JaffaCakes118
Size

2.3MB
MD5

fcf25672bb065ef740432aed9c85d577
SHA1

c6e15303f97fd76a37edbab7a94714faf6725623
SHA256

fd793f18a5f617b1e97456e7ca3d60d29d4dbcc5bfaa3ae2ec23b18be7e3914b
SHA512

63ac27f7d3535d70b051f385d63b4488c1041af61b12f5432e9948080d5f0a3ba14ede7e566c8c08ea051d0f668efc3c078c929fee0a2e69b692f3b2c6ed11ff
SSDEEP

49152:CPoxAbVMXPfAnfI17quhbRVuilyvT7stmjHQsW4yp+lpjJc:CPoxAbmfcOGuZyvZfW4Ja

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fcf25672bb065ef740432aed9c85d577_JaffaCakes118

Files

fcf25672bb065ef740432aed9c85d577_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ac690059c5a5250d53351c620acc4e1a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
ord516
ord518
ord669
ord598
ord520
ord522
ord524
ord631
ord709
ord632
ord528
DllFunctionCall
ord600
__vbaExceptHandler
ord711
ord712
ord607
ord608
ord717
ProcCallEngine
ord535
ord644
ord100
ord613
ord617
ord619
ord581

Sections

.text
Size: 112KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ