fdaedff7b4724d71d758d085257b5c9b_JaffaCakes118 | Triage

Sharing

General

Target

fdaedff7b4724d71d758d085257b5c9b_JaffaCakes118
Size

284KB
MD5

fdaedff7b4724d71d758d085257b5c9b
SHA1

15dac682da542ed1a901d1889d68d1ec22189b45
SHA256

ded809e1a4ffc3b73db4892e6a4ba77bb8332ffc01433489b2df988dedfd3086
SHA512

106f7d425da84e0c3da64d66a6ed255dae3a57965c14a0ca5720b718b6893578f1fb66897aaf2e57af453b6a8e0a6396d996c8862d333d7eb807b53a20e9909d
SSDEEP

3072:931ed1X9abhkPXh/0MAIXevOV28zB5uUhB1u2Sz31jTsofwfu0V5eNSPMym:j8ybh+OIUeuUzox31vso2u030hym

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fdaedff7b4724d71d758d085257b5c9b_JaffaCakes118

Files

fdaedff7b4724d71d758d085257b5c9b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8e94ffeb47c8079795fc9c617c29393a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
ord690
ord588
MethCallEngine
EVENT_SINK_Invoke
Zombie_GetTypeInfo
ord593
ord595
ord598
ord520
ord632
ord526
EVENT_SINK_AddRef
ord528
ord561
DllFunctionCall
Zombie_GetTypeInfoCount
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord606
ord607
ord608
ord717
ProcCallEngine
ord537
ord644
ord570
ord685
ord100
ord689
ord617
ord619
ord650
ord546
ord581

Sections

.text
Size: 160KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ