fda7e90de233963bbee26d0549de702d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fda7e90de233963bbee26d0549de702d_JaffaCakes118
Size

96KB
MD5

fda7e90de233963bbee26d0549de702d
SHA1

ef7ce4363145ce8413238bb941502bfcadb100e4
SHA256

1d105cd211a0b5495f0e42894b595849a74f97d13e2ccab125bba49c2cfdd832
SHA512

3b8c968d06cabd01b7e4eb4c4935eff21157e693e6b93a054aa836a594476e3817308347e6b123ba2a300c0e516dae81c9b92ca0bf8624ec81a2d6257f461aff
SSDEEP

1536:6gUAWQ2+NWAKxFN1Gt5DQn+M9Hi2+V/V5oPSSKT3oxFglQdyt8DsjIRx2E:xh3EC2CN5oPSSoYxFaPyDsjITZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fda7e90de233963bbee26d0549de702d_JaffaCakes118

Files

fda7e90de233963bbee26d0549de702d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3b92c37a8904e5a077641137a68c52e5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord666
ord595
ord632
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord644
ord100
ord617
ord581

Sections

.text
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ