ffa5792d6f9b1f921091ccb7febd9afe_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ffa5792d6f9b1f921091ccb7febd9afe_JaffaCakes118
Size

52KB
MD5

ffa5792d6f9b1f921091ccb7febd9afe
SHA1

9cf779ea6533d94621bfb133fbae1c96a228f63f
SHA256

b7fbc80ca51d4ab60f1bc10df9571ca699304ee951d835682dfabf8ccbe9795f
SHA512

a0a1188294336fb8b5a44718bea08f6b5066bf338bd36f03e76ea7dfc467deae05e97aa7908c65d64d459d45276ed0334ef8aa552636d23ee8e8079fe86583f4
SSDEEP

1536:fUo0nt+WQa+NWAKxFN1Gt56uU30Og4I4jJrwt77GK:fUtuU30Og4I4CGK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ffa5792d6f9b1f921091ccb7febd9afe_JaffaCakes118

Files

ffa5792d6f9b1f921091ccb7febd9afe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

30f2068b580ee429fda2d7df70e586c0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord666
ord632
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord608
ord717
ProcCallEngine
ord644
ord100
ord617
ord581

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ