2dddf290488938ed7024a15e7224729a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2dddf290488938ed7024a15e7224729a_JaffaCakes118
Size

181KB
MD5

2dddf290488938ed7024a15e7224729a
SHA1

a5116a2043af85ffcaad96ed0e0d9c0d8d29cbc8
SHA256

5e48ea71c87672dc84dbc0beada9c934a3dde12265d6920901e1f67e8e8a1c8f
SHA512

8be297be305e0a1cf24f61513baf79e6f90ac8316ab7ee1ea3b0df65c0578e2e91bc28414001209785f22f9c6a969e1a1d62c6acb51fba6bcd8a71b21d319ead
SSDEEP

1536:7Nq0PAeK7LcyQHioLn78FfYQccjWu1wHlghEexMUxPnVBMeG2HGMgVqUY+mw4Lf2:Q0WEioL7VVXywGNtYXpJKp8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2dddf290488938ed7024a15e7224729a_JaffaCakes118

Files

2dddf290488938ed7024a15e7224729a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c9f8b9d8f695ec5f37395cc7c210a48f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord519
ord631
ord526
EVENT_SINK_AddRef
ord561
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord537
ord644
ord570
ord681
ord685
ord100
ord581

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ