fb48b475011050bb25ef992b3596f1a2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb48b475011050bb25ef992b3596f1a2_JaffaCakes118
Size

24KB
MD5

fb48b475011050bb25ef992b3596f1a2
SHA1

8bf5be27eeef41c07616518687dba8d2e106e80f
SHA256

095f5741d82e9e309cbbe4aff564d0e054701839ff36ccebc0f8af57ac805d9e
SHA512

daacdfbda8e806e656d3236364743d0f6e2fe8386980a2942f09161dd9c1c689d0e7a28c34a3e40ad1a1247166cdb4663c9c0a2687af623bd8fe13a487af318f
SSDEEP

192:f4xyMaJ/0oRIgGRmWiuBG83unJvDlyeEbOfdWWDHh:f+40X1kWxAwOJ7lynbO1WWD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb48b475011050bb25ef992b3596f1a2_JaffaCakes118

Files

fb48b475011050bb25ef992b3596f1a2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

11b38c295409d800aefbfeb5f2ea6410

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord519
ord595
ord520
ord525
ord632
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord537
ord573
ord100
ord612
ord613
ord616
ord617
ord619
ord650
ord581

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ