fe76d3d8b1def2b636953c852135d2ef_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fe76d3d8b1def2b636953c852135d2ef_JaffaCakes118
Size

164KB
MD5

fe76d3d8b1def2b636953c852135d2ef
SHA1

d4490b307e342e668e276ce4a4486c666cebbd1d
SHA256

c9fe03f57ecfa1b781efb5156fa36e86a94ff6028db6722bec7795c621157382
SHA512

1ba4bd469ba2f3b9de9be643879c17529b1de5f3cfb31e66e21a9d0f8c06662ec6bad3a002b25f6c425562c966179bd3e2fbe3d3c071462fb834fa4437b49fbf
SSDEEP

1536:RekrQGlmkm5tVfnVgYTEZde9JVrAp6jK6/LCuF9QSrZ6E4LzcshTqwqTLVROI8cN:Re2OMZdISp6u2OuFmYN1shcB8y504

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe76d3d8b1def2b636953c852135d2ef_JaffaCakes118

Files

fe76d3d8b1def2b636953c852135d2ef_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0cfc87cc5d6c7450f1f60a969a11a0b8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord595
ord631
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord717
ProcCallEngine
ord644
ord573
ord100
ord616
ord618

Sections

.text
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 116KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ