faf803e507a5dcfe5f217ff3a0c6af68_JaffaCakes118 | Triage

Sharing

General

Target

faf803e507a5dcfe5f217ff3a0c6af68_JaffaCakes118
Size

616KB
MD5

faf803e507a5dcfe5f217ff3a0c6af68
SHA1

73e023e15ebe3459bdbf4cd6a8b46517d3ceb8db
SHA256

64d0d9e0cc5e9708ef05b911f466c1e5a160f4aaeb5ea951fbfb54363d130af3
SHA512

4601e21fca231efab11479d6fa17befdff981c08d988ba3316d3522d1cc2a323979bc9ad6b17c6d54014e69edbd93e76e2815f6950590ed4c1edf41ee6bb2d69
SSDEEP

12288:2cFsn5b3jAOJgC9JnDLWTgU7rwyX43jJ4TBVcpg2:2v5Tj9gC9JnHU3mUt2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
faf803e507a5dcfe5f217ff3a0c6af68_JaffaCakes118

Files

faf803e507a5dcfe5f217ff3a0c6af68_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5e63f67be55d6aaf940ff4f29d5c58a9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord695
ord698
MethCallEngine
ord518
ord593
ord595
ord520
ord631
EVENT_SINK_AddRef
ord678
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord645
ord646
ord575
ord685
ord100

Sections

.text
Size: 572KB - Virtual size: 568KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ