fbb71d8183b5d8f4b64feddff6023ab8_JaffaCakes118 | Triage

Sharing

General

Target

fbb71d8183b5d8f4b64feddff6023ab8_JaffaCakes118
Size

176KB
MD5

fbb71d8183b5d8f4b64feddff6023ab8
SHA1

4676303f425def7116c5c0a1c201f1ab18215a47
SHA256

183e1a1abee13b1ccb35cbc9f1d95efd2455325d9f5152fa8c6a31bbb79902ec
SHA512

58bbe2b4c3760997c5797220a579955f7112752bcc84a5893d44b365c5c09dd3676769211a5d7610f4178efe047e497f0290e00b6b91400204dbc14c72ea7014
SSDEEP

1536:7qoamkJCVi9NMXYg/ASmSsmJJXL/t7vpjJaM2HbJUlNKDeWWKnpj4YQa2odbdt/T:Wl6ASmSJtednpjP24Td

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fbb71d8183b5d8f4b64feddff6023ab8_JaffaCakes118

Files

fbb71d8183b5d8f4b64feddff6023ab8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

037d5d295d3e72f43cbd5f9051183adc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
ord696
MethCallEngine
ord518
ord593
ord594
ord598
ord520
ord631
EVENT_SINK_AddRef
ord528
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord608
ord717
ProcCallEngine
ord644
ord645
ord570
ord100
ord431
ord616
ord617

Sections

.text
Size: 164KB - Virtual size: 163KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ