fb2fbed78628709845128ab0948f6a71_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb2fbed78628709845128ab0948f6a71_JaffaCakes118
Size

96KB
MD5

fb2fbed78628709845128ab0948f6a71
SHA1

26d664dfc18c268a00390e6e9c51844fa8f978a4
SHA256

af4d17ec5e91072358db5972ec2c4b55403fc4319ae2687c7e6a1c5168a5b5df
SHA512

5efbe5a50d1658f8b46a704f0a887cd3dd818efe45f8719427b63b5b31b1ae2b5b8c6b764a932523522d42e64cd8b9e844ad3d2612c40bbee568f6f79d327a0f
SSDEEP

1536:leCneH50tJ33JzwqmY46Wy5OmfjoUn4UwIjMdngR4aeU0CoJQYUM:lef0t13JzwxduOihnEdngFF0pQYUM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb2fbed78628709845128ab0948f6a71_JaffaCakes118

Files

fb2fbed78628709845128ab0948f6a71_JaffaCakes118
.exe windows:4 windows x86 arch:x86

22cbc1fc56411c47f26106007f65b646

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord517
ord626
ord519
ord592
ord595
ord598
ord520
ord523
ord709
ord631
ord525
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord563
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord605
ord606
ord608
ord319
ProcCallEngine
ord645
ord648
ord681
ord685
ord100
ord579
ord320
ord321
ord613
ord616
ord617
ord618
ord546
ord581

Sections

.text
Size: 88KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ