2a32ad717ab4c09e3a7be5b842a5adc3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a32ad717ab4c09e3a7be5b842a5adc3_JaffaCakes118
Size

264KB
MD5

2a32ad717ab4c09e3a7be5b842a5adc3
SHA1

512f91a214a3a71f2ded6136f2d0dcfb3f7e1598
SHA256

c8b62475699bf14619f038d811e4dcfea5aa5e45cf23fd59696cca83e1e8bdf2
SHA512

25c2726ae33933abe38b1de7db5dd3ccb7c18c6950f4a932e947a94883994cb5c407fee633396d5a8327bc28da417f99b175e02354cd52409682521d198062ba
SSDEEP

1536:eAMJ249icel/Z01/NBX4UDpegM3zwACUJGLq42GrElP2TH1tEB/SHrxg4U9a4JHK:gX0e1FB/DpKjCLfa9BJH/b2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a32ad717ab4c09e3a7be5b842a5adc3_JaffaCakes118

Files

2a32ad717ab4c09e3a7be5b842a5adc3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a2f557a81ed416b887b1b621bff88d1f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord626
ord628
ord666
ord631
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
ord562
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ProcCallEngine
ord644
ord537
ord572
ord573
ord100
ord617
ord619

Sections

.text
Size: 256KB - Virtual size: 255KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ