fe92ec308dfd3d55b3432762510ffa8b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fe92ec308dfd3d55b3432762510ffa8b_JaffaCakes118
Size

36KB
MD5

fe92ec308dfd3d55b3432762510ffa8b
SHA1

4f2773f683dbb49e688e903d0076c162a12f1c3e
SHA256

920c51cadf7705ae06fca4c26b360c98e807db313dd42161b03e50b0b1e5af09
SHA512

a3c134a9c27b955ad2bd124ab603d65a614cf249fae0a41e77f6128fc7ad28795b88e498a24ca023cdbe388e7562ac77547d67b5662426cec050d51252f20426
SSDEEP

768:YAn6TNEDfGX25MTWIz6VDfpFKrYutBYvRJ:YAn6GTsMDVv/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe92ec308dfd3d55b3432762510ffa8b_JaffaCakes118

Files

fe92ec308dfd3d55b3432762510ffa8b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

68af3d26b5c2bfa06a8d70f2dd1dee8e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord518
ord593
ord594
ord598
ord632
EVENT_SINK_AddRef
ord529
ord561
DllFunctionCall
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord645
ord571
ord685
ord100
ord616
ord617

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ