fad4161ba31b6068a5f93fe4b628b1cc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fad4161ba31b6068a5f93fe4b628b1cc_JaffaCakes118
Size

140KB
MD5

fad4161ba31b6068a5f93fe4b628b1cc
SHA1

e2bb79616dda4927ed38c19af1b2b440a2983e00
SHA256

2fe071d8a089a02c5d547114f2c50c1f8e9f7e03e95434edfcdd83aac8d599bf
SHA512

ffc2e6ebfa7058263d5d15362218730337e161f64c28d150480398a4e312e3b7bf596df2ba9c4e834555b544b63a9dee6dc38821d2db876d0511d5416aae007f
SSDEEP

1536:2h9hHG/tOk20xw5iSKR5QZBWSsA+wB/wxvnk7BmmCYYUkPVFFlaTEVNwvrZtfAa8:2FHG/AiSQ49mGpkDF0TEfwvr3gL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fad4161ba31b6068a5f93fe4b628b1cc_JaffaCakes118

Files

fad4161ba31b6068a5f93fe4b628b1cc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c0de764cce88a4171dbabd7eea287652

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord598
ord632
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord717
ProcCallEngine
ord537
ord644
ord572
ord100
ord617
ord618

Sections

.text
Size: 88KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ