2700f44289fda36009b961f47e654bfc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2700f44289fda36009b961f47e654bfc_JaffaCakes118
Size

48KB
MD5

2700f44289fda36009b961f47e654bfc
SHA1

341f5ed86d725371a22f995beb2e76e6b5254eef
SHA256

3bf7f9c0c0200530dcc48436d02eddfa4e8d26581989ae131eb48743ad3133da
SHA512

2fae814cf9ef9e3cee133a28527e8056aad89687b4b13c8438e0355eda91d91eac3b7f6153158a71439412ff430b19ed02ad862326cdf733e6fd7eff6981cc70
SSDEEP

768:vUKQ2hU8DY/g1uVrUPKdk2J/HXrr/5Ea3e1SIE:vDQ2hB2QTGXrL5cAT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2700f44289fda36009b961f47e654bfc_JaffaCakes118

Files

2700f44289fda36009b961f47e654bfc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2d3cc8c54583ba29f5f78bc95da411d5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord621
ord516
ord595
ord631
ord709
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord608
ord717
ProcCallEngine
ord644
ord537
ord570
ord572
ord685
ord100
ord616
ord581

Sections

.text
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ