2a8828c8e3209f68766ea4bff5bd9d63_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a8828c8e3209f68766ea4bff5bd9d63_JaffaCakes118
Size

80KB
MD5

2a8828c8e3209f68766ea4bff5bd9d63
SHA1

c164df73eb7d67c1f8e764bf9c98c313758d9b50
SHA256

8f1b0588aefc34f30e75dd6e01d8ed979b48152670df8f06aa175c76e196be79
SHA512

81a0e14e04be60e04d638e315bdd62f74763a40e11fc9c89d8783df8f074fb1d6176ac5ee63abf2826c63fbb872e2a7b1595aa1a630fa12cfea73eb763a6e60b
SSDEEP

1536:Hq94Y05AfGpqLDYZFZIRd1qBZbSKEBEBqwluT:DsQ0Dp1qPSXBKBl6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a8828c8e3209f68766ea4bff5bd9d63_JaffaCakes118

Files

2a8828c8e3209f68766ea4bff5bd9d63_JaffaCakes118
.exe windows:4 windows x86 arch:x86

11a8e330a4df4e06f2794283b898f020

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord665
ord598
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord608
ord717
ProcCallEngine
ord537
ord644
ord578
ord100
ord616

Sections

.TEXT
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.DATA
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RSRC
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ