fee97d174c333314dec418c5f9bc751f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fee97d174c333314dec418c5f9bc751f_JaffaCakes118
Size

100KB
MD5

fee97d174c333314dec418c5f9bc751f
SHA1

c41681a315165383153ea6f031f3e224c2362f2e
SHA256

ce51c0a09615ef7160dbe08f1101476acd3d63903cc4b8c303ae3eadb31a2041
SHA512

4db477a95c546eed5687777d44dfb175a053a46db7e35f35e87f9ce6c6366d7188a1eda3421b3443dc2c65bcd7d6449505c964402b39b0f27a96d5286a53bdda
SSDEEP

1536:uvXs5T2TFqZKmpSFhxRSHdL9bsils2duT:mwfsmpcReL9jlo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fee97d174c333314dec418c5f9bc751f_JaffaCakes118

Files

fee97d174c333314dec418c5f9bc751f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de0d258fcf6c4d91d041ad1d96be5d96

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord183
ord187
MethCallEngine
ord516
ord517
ord518
ord593
ord594
ord520
ord709
ord631
ord632
ord526
EVENT_SINK_AddRef
ord527
ord529
DllFunctionCall
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord717
ProcCallEngine
ord644
ord537
ord645
ord570
ord648
ord573
ord685
ord100
ord616
ord618
ord619
ord580

Sections

.text
Size: 72KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE