fc2f837fdeaa4e0b52ae7fb6c0cfb8f0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fc2f837fdeaa4e0b52ae7fb6c0cfb8f0_JaffaCakes118
Size

336KB
MD5

fc2f837fdeaa4e0b52ae7fb6c0cfb8f0
SHA1

a7afcca1aace91a2b2cf4f52929e2fa853aba893
SHA256

6c575bc953b54c2a0cefb354c9baac85754ef13008dbbf94024d07cb18ccea0a
SHA512

755eef1e65c751c4a8034b61e2304a4f114bb65fcaf33b80eba11ba0dad684f7cae7daf1c126e3b56ab2851075f13a0b892e7ce90a216c7c63deaaf7ef8aea88
SSDEEP

6144:WV4sXa/m6O/QmysiGQnaYES7RBXiDlf90+uhQMyQ:WV4sXa/mdINaYLBy5fi+uhQMyQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc2f837fdeaa4e0b52ae7fb6c0cfb8f0_JaffaCakes118

Files

fc2f837fdeaa4e0b52ae7fb6c0cfb8f0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

26145320051100c6ee827ce2211ae240

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord584
ord588
MethCallEngine
ord514
ord628
ord593
ord595
ord302
ord598
ord308
EVENT_SINK_AddRef
ord529
ord561
DllFunctionCall
ord563
ord670
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord534
ProcCallEngine
ord537
ord578
ord100
ord579

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 308KB - Virtual size: 306KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ