fbd1e62226a6c269b440a37c131bb02d_JaffaCakes118 | Triage

Sharing

General

Target

fbd1e62226a6c269b440a37c131bb02d_JaffaCakes118
Size

55KB
MD5

fbd1e62226a6c269b440a37c131bb02d
SHA1

fcecb9e490198489a6a773b9373bdb1be8ea59fe
SHA256

2e7867999edf3fde65c965555c261bd8d418f0884c0d07a30500e48c3e6276c9
SHA512

a2972967cde68613ff4aba0465745e032367f0017347994ae77e960f54a9780d41a4653df6b7f8f52ee7be8719c4cf55af75dcfafd915702f5312cf478493452
SSDEEP

768:7nUYWSxLkIPo04TDva05+vyKmY37VmrxVehh2OMeG7hPq/k6clDAW2QYz3QY52N5:7l0UkUvoYr/2NGEjmCv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fbd1e62226a6c269b440a37c131bb02d_JaffaCakes118

Files

fbd1e62226a6c269b440a37c131bb02d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de143ca9d72530c9eb917dadb6e51bba

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord513
ord515
ord518
ord629
ord592
ord595
ord520
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord607
ord608
ord717
ProcCallEngine
ord537
ord645
ord685
ord100
ord616
ord617
ord619

Sections

.text
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ