fceaa2180d9bfd85f67064b824ff31a5_JaffaCakes118 | Triage

Sharing

General

Target

fceaa2180d9bfd85f67064b824ff31a5_JaffaCakes118
Size

365KB
MD5

fceaa2180d9bfd85f67064b824ff31a5
SHA1

89169203fa62481f6926c316855728c42eb25253
SHA256

ea370def632414d1e8fd88043a34b9104848ba35493a906f0ea4c41ae9ccafe0
SHA512

8dac4905e5cc7609bc83da34e2875ec70d89a6ee1fd95acedb019e5e2ea3f893fc83cc716d7b2f39b50235defe765a55fd93ee1b6c2a20cd3bd76d13f44d75b4
SSDEEP

6144:MEObTqNMzbF3t1xSWSKrCvTDfig5EwRZPQU7U8gcpAjyJBp:M1zJ7SXvPig53ZPQUI3cpFzp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fceaa2180d9bfd85f67064b824ff31a5_JaffaCakes118

Files

fceaa2180d9bfd85f67064b824ff31a5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f305dbec70bbc526bf5bfe1e3ff354bc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord598
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord713
ord608
ord717
ProcCallEngine
ord644
ord537
ord681
ord578
ord100
ord616
ord581

Sections

.text
Size: 56KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ