fea91bbf3bb8a3a47899c78ddd73d55a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fea91bbf3bb8a3a47899c78ddd73d55a_JaffaCakes118
Size

20KB
MD5

fea91bbf3bb8a3a47899c78ddd73d55a
SHA1

ab39021af999670a989364aff34ad1e99fcb7fc4
SHA256

7f5cbe3213191487a0a241b55f365a72d00cb9a185ab4540c6504e5b37bde5c9
SHA512

72d21d8a57229203749b71752496c7e72334cd2b86adc2cbbb6bb007c0247a472e687b10713290cd52cbd80bb60d6fcebffa2799e869642d9e4488cfd98a1dbe
SSDEEP

192:99s+ylka2A+6JheqsCE3AxfH51mtGlTq9jUC:99al12j6JheVqp0jUC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fea91bbf3bb8a3a47899c78ddd73d55a_JaffaCakes118

Files

fea91bbf3bb8a3a47899c78ddd73d55a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

24042350a0bb677dddc3c1d1873c8092

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord516
ord709
ord525
ord632
ord633
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord609
ord717
ProcCallEngine
ord644
ord100
ord689
ord616
ord617

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ