f2d1c62683496bb72e1bd709461b12c6_JaffaCakes118 | Triage

Sharing

General

Target

f2d1c62683496bb72e1bd709461b12c6_JaffaCakes118
Size

336KB
MD5

f2d1c62683496bb72e1bd709461b12c6
SHA1

d235c6733cea09403c96d8c5150b48b461bff1f2
SHA256

93e72c58c80159c72327c83680e1d070de5c1759392787d31448ec8b945da37b
SHA512

502fb49c633b3984b067a07860e0c71bc7df8370124f860d4555be9a6d8044c603437dc7c618b6c26b263b1306dc17adc5d49227a2de9c1cc8181486daad704d
SSDEEP

3072:QbrLF5NUdrSO9K/tagbdDu5nPlU4WhM+c0uGUjcfquss7fxrbK1crLF5NUdrSO9v:gbgqt5gWG2hfqulDbgqt5gu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f2d1c62683496bb72e1bd709461b12c6_JaffaCakes118

Files

f2d1c62683496bb72e1bd709461b12c6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7d79b353047f7c1dfc4f48a2e79979f3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord595
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord645
ord100

Sections

.text
Size: 208KB - Virtual size: 205KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 124KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ