fb1cdca2724feda50ea5c5c52716b076_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb1cdca2724feda50ea5c5c52716b076_JaffaCakes118
Size

24KB
MD5

fb1cdca2724feda50ea5c5c52716b076
SHA1

9a1ff451f183d54e023a294687563368be9ef40e
SHA256

4987a46588cc2de22c56f192b01ae9435edd4ab05b3aa3b1b24697a43f814712
SHA512

c6a491220605d80818bbb0f09a0deaecbc4910f017a5d7e706a757a1e016dd98c973f9e923c0e9cccd3a38244de71c44f54b1af4fb0bd54470469676df995994
SSDEEP

192:ColK+5BqUgDQdI2rPBWNx2FYdJCJITrneVXuEW6E7ZZe:dlRqVDSIysEyeW6mZZe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb1cdca2724feda50ea5c5c52716b076_JaffaCakes118

Files

fb1cdca2724feda50ea5c5c52716b076_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3accf752917c7298a4eae1a3b0dbce65

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord709
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord564
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord609
ord717
ProcCallEngine
ord537
ord644
ord100
ord689
ord617

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ