fcbd3f2764e06934a650453d6dff30e9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fcbd3f2764e06934a650453d6dff30e9_JaffaCakes118
Size

143KB
MD5

fcbd3f2764e06934a650453d6dff30e9
SHA1

5abd8c6b1932a84c305c4c36228b2acf0f33ba05
SHA256

7716f1f31d87e6c1f9046e97c1e2204795984255b81db40f59bdaf736b0df415
SHA512

f009da03a9944bf40c17d020c408eb6619a464b25334c6a96586490ab76cd119c58138a6a97ca0af08bb8810792c949b0e2a216258d2d8f94a8b6049e17ec7ec
SSDEEP

3072:J5PDykjCBx2hypK7D6zdX3+P+kdMTSpN:B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fcbd3f2764e06934a650453d6dff30e9_JaffaCakes118

Files

fcbd3f2764e06934a650453d6dff30e9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

825fa7e01003fb8a45b79d0eba2bd344

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord628
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ProcCallEngine
ord644
ord100

Sections

.text
Size: 132KB - Virtual size: 131KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ