2a3b5cc8589c1623c3b1c3f4fe5ce2db_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a3b5cc8589c1623c3b1c3f4fe5ce2db_JaffaCakes118
Size

44KB
MD5

2a3b5cc8589c1623c3b1c3f4fe5ce2db
SHA1

28748434aa3dd494a65143581ebf4f546b85a7d0
SHA256

a94e79bfc5fcd3e000a491954f5e7f0656dfedab521f2ade926df12a1d7033c3
SHA512

69839119c558ade46014415610a5e6f644e338ccbf327a1adab11eba20ae0eac173da7029b149e5be8bf8116ac7a242677c9dc9feb8d2d4f8d631ef286fd5bbe
SSDEEP

768:jU1qbgvxRr+h6trEYGtk+mx/prhoQokhvN3rjOm5:YTvy8n3xnoQoAZea

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a3b5cc8589c1623c3b1c3f4fe5ce2db_JaffaCakes118

Files

2a3b5cc8589c1623c3b1c3f4fe5ce2db_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6e2a9a0f826e27951ed4997a34318426

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord666
ord595
ord632
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord537
ord644
ord100
ord617

Sections

.text
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ