fdf045943b6a961a5c0f69247611d519_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fdf045943b6a961a5c0f69247611d519_JaffaCakes118
Size

20KB
MD5

fdf045943b6a961a5c0f69247611d519
SHA1

6b4c85f07fa60040dfde2c00d86780175b1493dc
SHA256

16aa2d5277d1ad7cafbe313fa4b16d6daf4db9d736413d2f86ae5b3d131c48a3
SHA512

f9d81d30d93303d5b68100f56c100b889088b755cc6a90f2abdf5808bba5a49e44fbe8e52dc50604f158ddf2abbf7d554ce9fc085b7a8185657efea162c8c743
SSDEEP

384:61rJtdi0Jv0uswTiAjdjdHH2hS4wkkDHH2hS4wt:6JJtEkLWcbkSWcbt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fdf045943b6a961a5c0f69247611d519_JaffaCakes118

Files

fdf045943b6a961a5c0f69247611d519_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9b242b37515725c75c37f5dad237ab17

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
ord583
ord585
MethCallEngine
ord518
ord709
ord632
ord525
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ord609
ord717
ProcCallEngine
ord644
ord100
ord689
ord616
ord617

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ