fa249a8ab009db7eb4c2ac3650cf614a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa249a8ab009db7eb4c2ac3650cf614a_JaffaCakes118
Size

44KB
MD5

fa249a8ab009db7eb4c2ac3650cf614a
SHA1

3b60fd02ecf458e34a5b97a9eed5d57eef4e5869
SHA256

207f702153309c2593d707656545d684d73e9c74d93969b0898a8c5d1bc20a6f
SHA512

c4768d3b081dd5357e7419520afb9856ee5a1415b623bdaf6958569fe67017ab7d98c9d57746dac9e87959e08785e18417e67ad1fab2a2eb7dc6e58e3f3fb9ff
SSDEEP

768:jAYwPFLQNZJYhRX9xstJyeAdaECt7MVxoQgtQgtQgrfNzpb6cV:GLQNZUYQUQUQEFDV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa249a8ab009db7eb4c2ac3650cf614a_JaffaCakes118

Files

fa249a8ab009db7eb4c2ac3650cf614a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b0f1a5047094e9fb9758fe6107d71830

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord519
ord593
ord594
ord598
ord631
ord526
EVENT_SINK_AddRef
ord561
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord607
ord717
ProcCallEngine
ord536
ord644
ord537
ord645
ord570
ord572
ord573
ord681
ord685
ord100
ord618
ord619
ord581

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ