2557665cd8c9b31cd9aefa2c4ccbc0cf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2557665cd8c9b31cd9aefa2c4ccbc0cf_JaffaCakes118
Size

32KB
MD5

2557665cd8c9b31cd9aefa2c4ccbc0cf
SHA1

9dbe5da1696594296b878da023a7e45d41d3a99a
SHA256

151262ca4aa59735a13081591d3719f7cd60ec6e6d33ffe36d06fba158333d9f
SHA512

dff95b8ac7a8b8969ff43d250e0d7162a976cd9285ed9d10016c32a470b5f71d459561e4568f8c24558da083864a140c22a1fc7b54cd2ffbb1b1164efd15c9f9
SSDEEP

192:JewuMfCYh8/jsS6m9pMuLz7h2OQrnWDnYIYOynitBs7:JewZfVCX6IPwrKnbz9tBG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2557665cd8c9b31cd9aefa2c4ccbc0cf_JaffaCakes118

Files

2557665cd8c9b31cd9aefa2c4ccbc0cf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ac84670bac2d2a1d64679732a12ada38

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
rtcMidCharBstr
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_QueryInterface
__vbaExceptHandler
rtcStringVar
rtcStrConvVar2
ProcCallEngine
VarPtr
rtcFileLength
ThunRTMain
rtcLeftCharBstr

Sections

.text
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.C+�09
Size: 26B - Virtual size: 26B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vmp0
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE