fb1a53b44959b59c3a47fc38b4545122_JaffaCakes118 | Triage

Sharing

General

Target

fb1a53b44959b59c3a47fc38b4545122_JaffaCakes118
Size

16KB
MD5

fb1a53b44959b59c3a47fc38b4545122
SHA1

9eb0c4a7c34d42c7e17fd8a76ebb3ec213540816
SHA256

9efbbbbc5bc692da24bf7b272aa4dcc0b6727c20f75e7e147de24134edcc0cf3
SHA512

e215caf07167fb98a6941cd218f18946e106eb2ece59a34731c0c3680a4d5e87bdc02e6c570a6b74941169976b5681877e921c161b09fcd302334cbb50e64ada
SSDEEP

96:yjR0XRpjenCGPi6MVeL+mnqR7NhZ8yb9mufsBLKjI2c:WsKnpieNKztmeId

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb1a53b44959b59c3a47fc38b4545122_JaffaCakes118

Files

fb1a53b44959b59c3a47fc38b4545122_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0955fe8481b2016a9bc11a0546a8f697

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord518
ord598
ord632
ord525
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ProcCallEngine
ord537
ord570
ord100
ord616
ord581

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ