2845ac5c50303b64eb97524ef575752a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2845ac5c50303b64eb97524ef575752a_JaffaCakes118
Size

76KB
MD5

2845ac5c50303b64eb97524ef575752a
SHA1

9173884173f4c6b1ef2f78f90752a423b046d6dc
SHA256

70e9be30c9e718f77c97ecc5bb86b5c6fd6565c99d44d9ca5aa80806059cd3dc
SHA512

aee12fe98a9dcb48c20980dee75e6404557baea3615ef38e77847dc102a77f45927319d5eff72d34c110ae0b769cacb25235d990e2af7d16a9d5db27fdfcf680
SSDEEP

1536:uTyTakBnvYZ4/2nDxHnSh/2BIr7fbmKBKpKrKAKcSuOo:tTzBvt2BIr7DmKBKpKrKAKZo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2845ac5c50303b64eb97524ef575752a_JaffaCakes118

Files

2845ac5c50303b64eb97524ef575752a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b29d955bece4f71e8ef6c0c75cf1c686

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord691
ord586
ord695
MethCallEngine
ord517
ord518
ord593
ord594
ord520
ord709
ord631
ord525
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord716
ord717
ProcCallEngine
ord537
ord644
ord570
ord648
ord573
ord576
ord685
ord100
ord616
ord618
ord580

Sections

.text
Size: 68KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 624B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ