2e08ddba6b2fbd66f41f856c0722cf64_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2e08ddba6b2fbd66f41f856c0722cf64_JaffaCakes118
Size

486KB
MD5

2e08ddba6b2fbd66f41f856c0722cf64
SHA1

6b04954113cc20f8fb2902289b5e13612d204a67
SHA256

f335a775985b868e41038ae0483201a501fdaec6f36a8b58b038fa2ca58bde71
SHA512

bba556c830b99f68f800390c3742ea830923ba0874f2cef7acbe9a99240658b9814639a0669d28fd199df64f7e7c005db08c259afec4ac3b4f3bfd79d6835c78
SSDEEP

12288:cyAlhMLnCTPe/m3IpGKrRuwT+zq2+i7R6nc:cyAlhMLnVpbrRLT+zq2+cEc

Score

1^/10

Malware Config

Signatures

Files

2e08ddba6b2fbd66f41f856c0722cf64_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e214f95f7f3a3181be62d978fbf0219c

Code Sign

01
Certificate

Issuer

CN=Picture ML cloud,O=Brown Flawless (c) corporation 2018,C=NL

Not Before

23/02/2019, 08:49

Not After

22/02/2022, 08:49

Subject

CN=Picture ML cloud,O=Brown Flawless (c) corporation 2018,C=NL

1c:41:ee:57:02:ee:e9:4d:d1:3e:a2:c4:48:0b:6a:0f:f4:41:bf:1c:2b:c0:5c:61:e6:a1:f8:1c:31:a7:bb:77
Signer

Actual PE Digest

1c:41:ee:57:02:ee:e9:4d:d1:3e:a2:c4:48:0b:6a:0f:f4:41:bf:1c:2b:c0:5c:61:e6:a1:f8:1c:31:a7:bb:77

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord632
EVENT_SINK_AddRef
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord100

Sections

.text
Size: 472KB - Virtual size: 471KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ