2e00f096b4b183ceae13d6f54e635bf8_JaffaCakes118 | Triage

Sharing

General

Target

2e00f096b4b183ceae13d6f54e635bf8_JaffaCakes118
Size

339KB
MD5

2e00f096b4b183ceae13d6f54e635bf8
SHA1

ffc67c4e66cb284fde89c1209f74a59d30d05177
SHA256

9ac33cce8c8c28ae463e6951ad22330c133423cfe84e9fa7f5ece41a25637e37
SHA512

bb05d70f852b46b16b6b0b3ea02bec8328c43c2d2caabdca2778985ea128c5e0b2adc1bef26e76968240baf84ae123bfbaa583566e2c394dbfe2e1919dbc6287
SSDEEP

6144:w+U1/33J+T67DCauQAtRSZm67jTGLxKIY00YOi6KDmSpr9C:w1WwxuQqcZmsGLxKIwYn3r9C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e00f096b4b183ceae13d6f54e635bf8_JaffaCakes118

Files

2e00f096b4b183ceae13d6f54e635bf8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

748d8849b0ca150ba1f9c6344caabfb3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord517
ord666
ord593
ord595
ord598
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord717
ProcCallEngine
ord537
ord644
ord570
ord685
ord100
ord616
ord581

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ