fc7e60e3eca4074ad43da94b7308743a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fc7e60e3eca4074ad43da94b7308743a_JaffaCakes118
Size

204KB
MD5

fc7e60e3eca4074ad43da94b7308743a
SHA1

2998e9e8d22b53d7d4ef82d57fd71b72e432fefa
SHA256

d55995ee1c26e8c6b666aa4bb11824bba6b3d6cc08cedbf88deb72737a8775ce
SHA512

704a81098ef1cd8a62c00abb77939c3b753d19bbb8ac47c1fd7eeed85e3665a46c639d8d1b501ab9cf76f1e374228257581d0d0cee776a86d88c5a027c910e52
SSDEEP

1536:EjpO1fD1abbCsRaKcVhhoGMgefs6GrXg8CiBzP9vbhUSOIlOKsGgcd91dReDHhU0:EjGLMVJhUxNbCKQxGL1dR0HCKmS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc7e60e3eca4074ad43da94b7308743a_JaffaCakes118

Files

fc7e60e3eca4074ad43da94b7308743a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ac9112d4aff7a11ec3a397ceb4f12181

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord626
ord628
ord665
ord666
ord631
ord632
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
ord562
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord608
ProcCallEngine
ord644
ord537
ord572
ord100
ord617
ord581

Sections

.text
Size: 172KB - Virtual size: 171KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ