fb3d73bf2cf1aac8c81b449a7c25ffdb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb3d73bf2cf1aac8c81b449a7c25ffdb_JaffaCakes118
Size

39KB
MD5

fb3d73bf2cf1aac8c81b449a7c25ffdb
SHA1

d6cf0d3ab85aec65945c5bfd849282c969329245
SHA256

b08234e6bc45d145dda2125e577118aaad2eaa3fde41cdcab1f2d0840a9e095b
SHA512

b879ad132647077b61777f4479bb0d577c9e8fb446e3e97a2c0121a61cefc8f2132dae403fbdee70c048b0f81af2a0f9f860543751447ae615e7fb0f5bf20668
SSDEEP

768:26tkF/iP56xEP5pthzM0bE+tmZbKVIInnv3o5ox2C:/M/I56x4VPhtdfkQD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb3d73bf2cf1aac8c81b449a7c25ffdb_JaffaCakes118

Files

fb3d73bf2cf1aac8c81b449a7c25ffdb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

716014ef9025785b9aba53b6353383f4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord621
ord516
ord631
ord632
DllFunctionCall
ord601
__vbaExceptHandler
ord717
ProcCallEngine
ord570
ord100

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ