fc16b7429d5f3e4c786343938618ed94_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fc16b7429d5f3e4c786343938618ed94_JaffaCakes118
Size

140KB
MD5

fc16b7429d5f3e4c786343938618ed94
SHA1

bb8b5f8b4851bebae280898f3a085193cfdc3679
SHA256

890157028f2295a07e46e81b46b4153274d4f8b99afca22e2fa502f2cba3488a
SHA512

8a811aae77b93420cd8a1b4b95a0ee82b163da2d65e4145c718c9ca8e551ac2c6902d20c6b148cc02f5603588a4831fcbb121925fb654d610798add155dac1f2
SSDEEP

3072:9yDnJhVZtyk4+BobeZMGziOJCBVNQdTR8DxU0bXiwo+:yhVkd0JR8dNXiwo+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc16b7429d5f3e4c786343938618ed94_JaffaCakes118

Files

fc16b7429d5f3e4c786343938618ed94_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dfc1bf42e005b0f4e781d0e21a970e3d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord593
ord594
ord598
ord631
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord670
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord607
ord608
ord717
ProcCallEngine
ord644
ord537
ord570
ord648
ord573
ord681
ord685
ord578
ord100
ord616
ord618
ord581

Sections

.text
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ