fd94f628064d82e83448fe0256648522_JaffaCakes118 | Triage

Sharing

General

Target

fd94f628064d82e83448fe0256648522_JaffaCakes118
Size

488KB
MD5

fd94f628064d82e83448fe0256648522
SHA1

4baec32f29d01ee90c1f8c2d5a077d24940f1b72
SHA256

46da914dc9d6ec79e220bfb975dfdf10db4f931c208ee94f100083378b4aa809
SHA512

46a40cf234d9cf901e75f9ce5b77f98db8b05e364ac587735c3d8ab4a9ac2110c684e19ee5513bbf1e127d9c19129bda2437977942a74b21d07b84837d38827a
SSDEEP

6144:JVAJ86RndXfUIvUjqKf7Ka5RVAJOybTrC:0JNRRfUIvU57xeJ7T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd94f628064d82e83448fe0256648522_JaffaCakes118

Files

fd94f628064d82e83448fe0256648522_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bbbe6d6388e3e391e4ac1fb186cbf758

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord693
ord695
ord696
MethCallEngine
ord516
ord629
ord666
ord595
ord598
ord520
ord632
ord526
EVENT_SINK_AddRef
ord560
DllFunctionCall
ord670
ord569
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord607
ord608
ord531
ord716
ord717
ord532
ProcCallEngine
ord537
ord645
ord570
ord648
ord571
ord572
ord573
ord681
ord576
ord578
ord685
ord100
ord617
ord619
ord650
ord581

Sections

.text
Size: 452KB - Virtual size: 448KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ