fd5d63f230d8b475e37185980c200e32_JaffaCakes118 | Triage

Sharing

General

Target

fd5d63f230d8b475e37185980c200e32_JaffaCakes118
Size

252KB
MD5

fd5d63f230d8b475e37185980c200e32
SHA1

c0a1fcf744ba9a573808a2b3ccfdc0b603df1e82
SHA256

c981ccd9205cad12b579ec2013d4607bf3991599dae9e3f6252b8f0062289c0e
SHA512

d180e2860ac355a4261d616c704506688dbb3b3f47b1b7b4bfa6d2e6a6c20c2108406bcfb7880631240311f4b7a7f41a756764e4d82dd09fba375b37c4f8e702
SSDEEP

3072:UtaNyG3P2zKb1iPk/6mUUczdZeo3IFeAmQSEPll+WwnYAo7RDwHMJBdIENT0r:V7R6mkMoYFRmqWWP7tcCT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd5d63f230d8b475e37185980c200e32_JaffaCakes118

Files

fd5d63f230d8b475e37185980c200e32_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b615268a0568f5f5ca09c8d458367e49

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord666
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ord717
ProcCallEngine
ord537
ord644
ord573
ord100
ord616
ord619

Sections

.text
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 180KB - Virtual size: 178KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ