fdec3a1be68872186b028bab8e6d0d45_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fdec3a1be68872186b028bab8e6d0d45_JaffaCakes118
Size

64KB
MD5

fdec3a1be68872186b028bab8e6d0d45
SHA1

1e5684a9de1a91c2fa689ebd4cb40c0171cde854
SHA256

7390e8cd7e806d55594f1ef6d6ead056f8fc2f246c03fc4d83bd78fa938cc24c
SHA512

dd18a3437a607f63771a531c74cea0e0b26022653625d30538b323ff9f321623c8430705c036dee72cadba631e5dad997bdbbe63c243dac150331496974c24f1
SSDEEP

768:4R2qMRa9D7psCD0MYswTP+T0D3bfLylyG3qXEoWTb4cQH+n:7csqPcP+TCOyG3iEoWTb4cQH+n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fdec3a1be68872186b028bab8e6d0d45_JaffaCakes118

Files

fdec3a1be68872186b028bab8e6d0d45_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b615268a0568f5f5ca09c8d458367e49

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord666
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ord717
ProcCallEngine
ord537
ord644
ord573
ord100
ord616
ord619

Sections

.text
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ