fd48e8c8e4ee6c00e9b49cfe90d014ea_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fd48e8c8e4ee6c00e9b49cfe90d014ea_JaffaCakes118
Size

172KB
MD5

fd48e8c8e4ee6c00e9b49cfe90d014ea
SHA1

b973baa3625387d8a64f53dc23c66b6658c6fafc
SHA256

529c3a5a3d24b8c5c14f32eccba1776b958f5faf376135282fc5d9cc4c8df44b
SHA512

b2c0d46820c4ef2998341e77c9c2f54177d6bc7965b7cea23934b3599d758a6187f5e3264f9bca5f7f5bf3e4bbacbe1c45f308c9346a5bb24054ebd287afb24f
SSDEEP

3072:RmAVYxT7fud1uFDB3gwj2EjBNnxkJN6rWC261N3:FVYxXfS1ed1jV/6fCN1l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd48e8c8e4ee6c00e9b49cfe90d014ea_JaffaCakes118

Files

fd48e8c8e4ee6c00e9b49cfe90d014ea_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0c9019b7c5ed11caa7d911ee75462122

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord537
ord644
ord572
ord100
ord616
ord619

Sections

.text
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ