ff3394b319a0491c805cfb2fc5e888f8_JaffaCakes118 | Triage

Sharing

General

Target

ff3394b319a0491c805cfb2fc5e888f8_JaffaCakes118
Size

40KB
MD5

ff3394b319a0491c805cfb2fc5e888f8
SHA1

50bec9fbf22005fec8c841860c83c4dcb4913213
SHA256

feba86d3cb66ce364bdd61b4e35219412d2526567b182ecd1da0398dc2c8dca6
SHA512

103dc4ac305e11831255141cf2f89c38cbd0ccecb3cdfeff8e063fe2f08efecf6ad97cd8b4705cd5fda399eb4bc510171d494ae69a36b9a9c1ac98b4f93b7992
SSDEEP

768:7Yjblj4eNsnAwH0PibV/1k3DkSSIVLP9j/B72TiBp2K:7cJjLA0PibV/1SQSSIDp2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff3394b319a0491c805cfb2fc5e888f8_JaffaCakes118

Files

ff3394b319a0491c805cfb2fc5e888f8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fb2eb67247ff063e27bbd2bd74787164

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord518
ord558
ord593
ord598
ord631
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord607
ord608
ProcCallEngine
ord535
ord537
ord573
ord576
ord100
ord689
ord616
ord619
ord581

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ