ffae56c84643a75576903d00ac6ab452_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ffae56c84643a75576903d00ac6ab452_JaffaCakes118
Size

428KB
MD5

ffae56c84643a75576903d00ac6ab452
SHA1

c74d1db0664f25846d76b8ee9e70c9de0bc5557a
SHA256

ceb16bb60b1afef9cf144a010ceccf21ff53bda124be237e161920b9f3f96d5b
SHA512

fa4ce602556f667682962abdc4af24168139c8a672db3b4ff0563da0bf2a61a23c7553ee912552d41ca7650b663f7a58af2f05a59e1511075887fdfd385a96a1
SSDEEP

6144:J2ZLW0RPhTeiu79HcvTF2HUdjnI7v6FGqfaxCthC4890BjWZIjl6Brm05JVrSNKe:eW0lp+7uvT9dL0F8axsy9DQ6Brm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ffae56c84643a75576903d00ac6ab452_JaffaCakes118

Files

ffae56c84643a75576903d00ac6ab452_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ed9b47848be1a98aa3d0ebf10ac95553

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord608
ord717
ProcCallEngine
ord644
ord573
ord681
ord578
ord100
ord619
ord581

Sections

.text
Size: 420KB - Virtual size: 419KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ