fe6565f8c3e186c2ff7410fe5f938f2e_JaffaCakes118 | Triage

Sharing

General

Target

fe6565f8c3e186c2ff7410fe5f938f2e_JaffaCakes118
Size

40KB
MD5

fe6565f8c3e186c2ff7410fe5f938f2e
SHA1

f97b3205864672af674793ddb37fa2f8badd6845
SHA256

68a565b05dfd824da3bf94f30e883a5b777fa62f47364d756f1b4047d8f75038
SHA512

bd27f2196cdd27757de1544f74f4e98069ca211029d295004f62c8dd3ccfae46598d61f5d4e9115144675ec9228122951c18d1a4e7e70489e07e043578997fec
SSDEEP

384:YPR96bO+bXmS+3TCSsY2Ts3P4Dhpvf7P0bOSX6VgnVdbAPhGVVLtbaO/EjjaV0zE:O0bO+bxuTvQTs3P4f0qeIytbBREue6j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe6565f8c3e186c2ff7410fe5f938f2e_JaffaCakes118

Files

fe6565f8c3e186c2ff7410fe5f938f2e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b3fa64639b184f8fdb3f3c69d2c4a324

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord660
ord593
ord594
ord520
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord607
ord608
ProcCallEngine
ord645
ord570
ord648
ord573
ord100
ord689
ord612
ord617
ord619
ord546
ord581

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ