ffb02300c5de953d71d789db201fc43a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ffb02300c5de953d71d789db201fc43a_JaffaCakes118
Size

492KB
MD5

ffb02300c5de953d71d789db201fc43a
SHA1

a07aa5492eefed7d22dfcbb6ab02dfec7d738b05
SHA256

ebebdf3d5243f7264164bd5c5ca5b3768e79edd862a946e6bd4e969a8a3853b6
SHA512

ee05e5faa4f6977cf68891ebf46efe29a02bce0304dccdc5a84fe1c4722985b0a7a23e5d70ef4a91b0df3937ec1acc3046417fc8e1b6181936924c5bf0d5240a
SSDEEP

12288:NlfKnyq1tPeW9oZA9mpmV39MOFF2ek2cxEXto1NhCGj:z8ptT4qVtcek2aUC/hCi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ffb02300c5de953d71d789db201fc43a_JaffaCakes118

Files

ffb02300c5de953d71d789db201fc43a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

87e1eff45d4b9d65f275a3b510f16b63

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord598
ord520
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ord717
ProcCallEngine
ord644
ord645
ord647
ord685
ord100
ord617
ord619

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 484KB - Virtual size: 480KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ