fdc193c2390f2798e3e00d08af436371_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fdc193c2390f2798e3e00d08af436371_JaffaCakes118
Size

2.2MB
MD5

fdc193c2390f2798e3e00d08af436371
SHA1

13b1a1c0d750be18707abbbef47941b4ffdb9503
SHA256

d8cd0a03f85c02588ddd2bed094d5a54a4e8127060b8301ab6cc1ec9a422cb14
SHA512

10dbe361b1cccf3cc13014467617be0840749bd66133a22fd991afea4e60c9a41aba23ec38f3d609151e521efac164ea0c035d414dcddd6abe54bec06b55269d
SSDEEP

12288:b0IOn56MrsPy1yF5G9vUgqQZSUp4P/nVLmFBYCB/NsLla9rYFb+nPkZW/4mLr/gF:b0I245GHqQZSI4noFyM++uicUNv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fdc193c2390f2798e3e00d08af436371_JaffaCakes118

Files

fdc193c2390f2798e3e00d08af436371_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9e65b7ba5c2c9cbb3d20c91bf4f39cde

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord593
ord595
ord598
ord709
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord607
ord608
ord717
ProcCallEngine
ord537
ord644
ord570
ord681
ord685
ord100
ord616
ord581

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ