fb332e8661187f1e6fc1f83f8f3de2ce_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb332e8661187f1e6fc1f83f8f3de2ce_JaffaCakes118
Size

175KB
MD5

fb332e8661187f1e6fc1f83f8f3de2ce
SHA1

f0dfd09886bbb94419a9c92d0982222193dc5043
SHA256

32bc796c2f82cde7b5edf7d99a42150fe44b443409dfb3913d50f4e25954d6e0
SHA512

84a255b792bbfa376f7a170e17e12b5d61af33e1f88f01cdb1a195298a5f8d6bc5f0a2c639cfedb4c5f56173d4d6fc7ed58afb481046f68865326e4671cebeba
SSDEEP

1536:0INAVwetaSkfzHfirORaU8hBM6aXpsfXF102kxAEgJZ+tzm8sMCRK67E:zAmSMOXF102r9D+tzkRK6g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb332e8661187f1e6fc1f83f8f3de2ce_JaffaCakes118

Files

fb332e8661187f1e6fc1f83f8f3de2ce_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9d4ea0a052a2f3b08ea3dc04dcb7b641

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord598
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord537
ord644
ord100
ord616
ord581

Sections

.text
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ