2b47f77217630aa85ef58823df0b18ea_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b47f77217630aa85ef58823df0b18ea_JaffaCakes118
Size

56KB
MD5

2b47f77217630aa85ef58823df0b18ea
SHA1

0cdd4b7f5387a5ccd11fea0f226f529e47fc848a
SHA256

74c2785349efe4cf3a72b1c018ce909b2f9591a47ff912a0d94ff58e5e2b0258
SHA512

53aaa93fc3c6de3d587f266a723486035ad156f30fd8afe94e71766febe72d9922128ca8fe964e6bc591d97a67a3623b629555a9d87a2d6df4fa18bbe4f2b63f
SSDEEP

768:unXmUt1Bhy4iFhEb7i17iShOkhbZBhJtLXmX:GhaFS+1XB7h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b47f77217630aa85ef58823df0b18ea_JaffaCakes118

Files

2b47f77217630aa85ef58823df0b18ea_JaffaCakes118
.exe windows:4 windows x86 arch:x86

34e8fea71c72680c48c1c707ec3ff874

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord518
ord598
ord632
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord607
ord608
ord609
ProcCallEngine
ord536
ord537
ord645
ord570
ord100
ord611
ord616
ord617
ord546
ord581

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ