ffe29ad201401074fad1a1e4a89221ca_JaffaCakes118 | Triage

Sharing

General

Target

ffe29ad201401074fad1a1e4a89221ca_JaffaCakes118
Size

68KB
MD5

ffe29ad201401074fad1a1e4a89221ca
SHA1

60d8d956d28e333cd1f6687d3911668fe4206f03
SHA256

4e4c81acf5c25d71f9ee8ece849a500e1f218bb5326fd78be6c6d8dcb724959b
SHA512

1ecdf97606c70e6c246b431cc9368184d047e14a727fbc5395681f1d7edd2aee24386c9bbeefc218c2cd6d6b6f2e320c5ff74d128e3ad4616b46f6f0312fa07e
SSDEEP

768:hxT378v9I9e8kg5upW93VLUBvXGcV/9WHORRk3n/PneHm63xS2fhgsUH3vc49jMy:3LG9IP5upktUBOcJ7vRfhgsUXx83lg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ffe29ad201401074fad1a1e4a89221ca_JaffaCakes118

Files

ffe29ad201401074fad1a1e4a89221ca_JaffaCakes118
.exe windows:4 windows x86 arch:x86

18ff7fc763cec91d93523f2671eaa564

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CallWindowProcA

kernel32

GetProcAddress
CopyFileA
LoadLibraryA

msvbvm60

ord626
__vbaCopyBytes
ord669
ord593
ord595
ord598
ord631
ord632
ord525
ord527
ord529
DllFunctionCall
ord600
__vbaExceptHandler
ord711
ord606
ord607
ord608
ord716
ord717
ProcCallEngine
ord535
ord537
ord644
ord645
ord570
ord648
ord681
ord100
ord616
ord617
ord580

Sections

.text
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ