2e152ff98c5269ff2bd1072e82d7a1a0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2e152ff98c5269ff2bd1072e82d7a1a0_JaffaCakes118
Size

36KB
MD5

2e152ff98c5269ff2bd1072e82d7a1a0
SHA1

17b25e65b60f9b2f86e5201ab3c5308932124b40
SHA256

a77b62ad21d12c2d2f0ecfaf88c9a8006f1098690170dc4939d047ae8aea12cb
SHA512

964bd6aaf9be30527eafb518798bca17d4c20fd2197373993dd424f6258fa824a1a33e34e98225232812755a236b97c399b21114dd1a593617140bf5fff50c6d
SSDEEP

768:U/yIdeM64Jr79E3pOF8TbrVG2IIw86c5Q:U9b64Jr7+3pOF8TbJ9IIw86mQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e152ff98c5269ff2bd1072e82d7a1a0_JaffaCakes118

Files

2e152ff98c5269ff2bd1072e82d7a1a0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f400f0baa688d6905d487e7718145206

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord661
ord557
ord666
ord593
ord594
ord596
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord606
ord608
ord716
ord570
ord100
ord610
ord616
ord617
ord540
ord619

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ