2a763ee702c6e9787a89c9313c852792_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a763ee702c6e9787a89c9313c852792_JaffaCakes118
Size

136KB
MD5

2a763ee702c6e9787a89c9313c852792
SHA1

259e3ec22eb881fc6d18b4bd936619bec17c79e8
SHA256

1ba0f3ba727802eecca352a8404c4da3aec94822a682f4c16e7317b3c5c69f22
SHA512

52bc399d5f05f36146f3b4cd88a4ea2f5fc0f85c778de14828e9d0ed0e505a2f8b969cfb0a6d3402ea20119daaf4dc837dce5d5f1c46ca09162d5a811c59ddb5
SSDEEP

1536:4BwWQN+NSAKxFN1Gt5d2n3/2BBo0y3/ewAyXpgrhQSsqFOPx0EF8yHRKuPkrIA5K:41hI0yPlXp2ySGPqEFTxKoXuk9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a763ee702c6e9787a89c9313c852792_JaffaCakes118

Files

2a763ee702c6e9787a89c9313c852792_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2067beeda17969d0028b09fe2711a4e4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord593
ord594
ord631
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord717
ProcCallEngine
ord644
ord537
ord570
ord648
ord573
ord578
ord685
ord100
ord616
ord618
ord581

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.w32
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ