fe758b161906fd488031afb8c6e48600_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fe758b161906fd488031afb8c6e48600_JaffaCakes118
Size

52KB
MD5

fe758b161906fd488031afb8c6e48600
SHA1

0203591f17d96d3adf9cd0dd77f433e5daaacaa1
SHA256

93107c90ec2dae4d23ba1374a7f344ab05b9476f00a1a59a31022bf324c0392d
SHA512

943df962b66e8c758e267bf7b948fa8aaaf6e44f1531b2645849954e475c857f54a2506ae5eee480d51e83e7a129d72d64bf7afd058931fc9db4051136260103
SSDEEP

768:zr2C3b/CEmhGbHZZnuVMYq4rlu81K4y7q0IMary2hcmBwvv0:zrLbcIbHZZu6YqMFy7q0l8y2FBL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe758b161906fd488031afb8c6e48600_JaffaCakes118

Files

fe758b161906fd488031afb8c6e48600_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f3c9dc15e3e4f4836c1401c647dea21e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord583
ord691
ord586
ord695
ord698
ord518
ord555
ord665
ord666
ord593
ord594
ord598
ord631
ord709
ord632
ord525
EVENT_SINK_AddRef
DllFunctionCall
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord716
ord717
ProcCallEngine
ord644
ord537
ord647
ord648
ord570
ord571
ord576
ord577
ord685
ord578
ord100
ord687
ord689
ord616
ord617
ord619
ord542
ord580

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ