2b87106aa0f968aca00fd9febe3ceec4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b87106aa0f968aca00fd9febe3ceec4_JaffaCakes118
Size

16KB
MD5

2b87106aa0f968aca00fd9febe3ceec4
SHA1

d1ef2929874f7ef4e4989e52376340fbc08221ab
SHA256

169d689b5cee1049facdf7c5d0290c3d0f2cc918964cde77f29c96efa91aafda
SHA512

56280c53d61042b699813211ade4e9729f3336cd068f41289d428559ce75cd786016a57f6c678c6556b513bd99ba554279916ca616baa299fcc68336cdd569bc
SSDEEP

96:I9FmITtavrT6eFvt/2CoEl435vlUgGuVsoz96HI2:2tavrTbVt+rEl43zUcyYCI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b87106aa0f968aca00fd9febe3ceec4_JaffaCakes118

Files

2b87106aa0f968aca00fd9febe3ceec4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c1a5c27a02a9a624d92c4365bbae2fcd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord666
ord632
EVENT_SINK_AddRef
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord716
ProcCallEngine
ord576
ord100
ord579

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ