fb939d570fe10cde96caa8dc09768df3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb939d570fe10cde96caa8dc09768df3_JaffaCakes118
Size

36KB
MD5

fb939d570fe10cde96caa8dc09768df3
SHA1

b1e69b8646ec37cf5d7384cb2bf7846390b1d77d
SHA256

fc3b4c1cbb3386b53fe3d87e2808b34299afd81eff84e355d9426e5194ae8816
SHA512

84fefe57f1812b9d144a7d6f2acee211bedfab78e27bdfa0f13923f0db15492d9c8ba8a3587a9ebe5f5023ff396364f29d82f99b26d8cabcb732d542c03b866f
SSDEEP

768:DhcONuY2m/AmS6bn5NLeaKUd/AmS6bn5N:9/omS6bWWdomS6b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb939d570fe10cde96caa8dc09768df3_JaffaCakes118

Files

fb939d570fe10cde96caa8dc09768df3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6450f448be334c6fcf184c086f9a88da

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord631
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord717
ProcCallEngine
ord644
ord573
ord578
ord100
ord619

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc_
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

��a
Size: - Virtual size: 1B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE