2a6589225504fb0e8457cc4c006ad4be_JaffaCakes118 | Triage

Sharing

General

Target

2a6589225504fb0e8457cc4c006ad4be_JaffaCakes118
Size

40KB
MD5

2a6589225504fb0e8457cc4c006ad4be
SHA1

7baeed49e5101598e6bbbd2ca21e486905e296a0
SHA256

c6b9521745b5e48734f45ab11e134c1ecb22275bbfafb1028236f9e3e2006ab5
SHA512

85f73682f136173b8afb482c5ec55f2dd63582464a202dd3b02694077a27f524d08f9c419bacae2fd933dc838d320ae0153eea24dc641b8a5c11afb38611ae86
SSDEEP

768:RinPhrXNSfJL1fPTUgl7FAmfODGbCDqRW:aPhrXsNFPTUf1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a6589225504fb0e8457cc4c006ad4be_JaffaCakes118

Files

2a6589225504fb0e8457cc4c006ad4be_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2203bb1728d06ce99e550f97273441bd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord666
ord667
ord592
ord595
ord520
ord631
ord525
ord526
EVENT_SINK_AddRef
ord527
ord528
ord529
DllFunctionCall
ord670
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ProcCallEngine
ord644
ord537
ord645
ord648
ord571
ord572
ord573
ord576
ord578
ord685
ord100
ord616
ord617
ord580
ord581

Sections

.text
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ