fc5eca29e36e3c22d352562dd86c70f3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fc5eca29e36e3c22d352562dd86c70f3_JaffaCakes118
Size

24KB
MD5

fc5eca29e36e3c22d352562dd86c70f3
SHA1

b1e02a1636604c4e1d08a4f2717eba5ef81acd35
SHA256

cd41836560a9c21b7ebb143db7a8f61a34da696efccc7e731243321e5b4a4d44
SHA512

00c21fd3ac0d88716154b8f246da98b64999210643e6e66daf56a3410a5e0c56e706cd66a013e527d06849cfbe696b05602029362e0a4f890b84ed8ad6b1cb89
SSDEEP

192:7p6+Gvywx7OgMVEisbpQhEuM7scNTfjyxtOrgQgtwEjBvPf1jufItepf:9Aog/isbChx3wIH9juMepf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc5eca29e36e3c22d352562dd86c70f3_JaffaCakes118

Files

fc5eca29e36e3c22d352562dd86c70f3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3accf752917c7298a4eae1a3b0dbce65

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord709
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord564
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord609
ord717
ProcCallEngine
ord537
ord644
ord100
ord689
ord617

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ