fd3cc725cee1b57cfc24c77c3f5a62df_JaffaCakes118 | Triage

Sharing

General

Target

fd3cc725cee1b57cfc24c77c3f5a62df_JaffaCakes118
Size

144KB
MD5

fd3cc725cee1b57cfc24c77c3f5a62df
SHA1

62901ff80f018ef99257b14da895acca57d5a6d6
SHA256

348dee9a54c80df9c65d0af2197daad42ad796f6e0a1c625191effb21dee936c
SHA512

33cfdb224c6301257419f9a107458e6ad1970659b141a66adc498b5bde9689c6ed25a7ee896952d0a0e91098104902acbadaedd5a51085f4e80401e78136002c
SSDEEP

3072:ZgQ4M3GPabC29W29z29g29929q29v29U29529u29L29o29l29i29H29c29h29G2Y:y29W29z29g29929q29v29U29529u29L9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd3cc725cee1b57cfc24c77c3f5a62df_JaffaCakes118

Files

fd3cc725cee1b57cfc24c77c3f5a62df_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2d62e8681f640012a30818775c6b7c03

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord593
ord594
ord520
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ProcCallEngine
ord570
ord648
ord573
ord100
ord689
ord612
ord617
ord619

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ