fa9791d005b7ae04d340bb8cb98311e5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa9791d005b7ae04d340bb8cb98311e5_JaffaCakes118
Size

180KB
MD5

fa9791d005b7ae04d340bb8cb98311e5
SHA1

0ef6edd3e67054614a6d0a9d06bee0b829cc9920
SHA256

8fbbe0244ff8f7bfb436ac9b8455da5a844404a80332afc74f9dfefd3054473c
SHA512

c840909c433186e29e5f6486bc0e766e33b2c3fe5ac98be2ccb7afde3fd4a4bebdf23020a3bdd1ed7cfa61d80921baf02cf0e4d7541103f277f8efe2aba0d7f3
SSDEEP

3072:O+XcW9CtbMf7Q9gfin2KP6+w2DKw1+zIvTXkXbuYUUqm6hGYYCGLWeai0PHOmDad:xXV9/zQ9Fn2KP6+w2DKw1+zIvTXkXb5h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa9791d005b7ae04d340bb8cb98311e5_JaffaCakes118

Files

fa9791d005b7ae04d340bb8cb98311e5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cfea0b42ae459e0e2bff482c8c32d822

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord595
ord631
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord606
ord717
ProcCallEngine
ord644
ord537
ord572
ord100

Sections

.text
Size: 172KB - Virtual size: 171KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ