2648dc8a6ad21c7000b3fc4f40f7fec2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2648dc8a6ad21c7000b3fc4f40f7fec2_JaffaCakes118
Size

68KB
MD5

2648dc8a6ad21c7000b3fc4f40f7fec2
SHA1

751143df8208d74ef978656e9c894e0b52f61644
SHA256

79088f108e9ac3e38dc3ca9bafe45b4eb26c38c7f6cd4cef17f34b374bf62566
SHA512

532c8ea69bc0d7fc9fec914483351581ff8f59a68e423348279a0d8a89390ce666b80ebd116b8db8ecb6ea23e8faa4b9f58616a325caa755d0e896ff55283ec8
SSDEEP

1536:TW1mJNA8TbVqJ/3h+3u8/2fw4ViTBSzKb:TWYJN55qH+35efwdTJb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2648dc8a6ad21c7000b3fc4f40f7fec2_JaffaCakes118

Files

2648dc8a6ad21c7000b3fc4f40f7fec2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

414246aad4f9231c5f8732bf9105bdd9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord517
ord518
ord626
ord666
ord669
ord593
ord595
ord598
ord525
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord607
ord608
ord717
ProcCallEngine
ord644
ord537
ord648
ord570
ord576
ord100
ord616
ord617
ord618

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ