2c3e82b7baa8bd2f8da8ab5a5480ae33_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c3e82b7baa8bd2f8da8ab5a5480ae33_JaffaCakes118
Size

593KB
MD5

2c3e82b7baa8bd2f8da8ab5a5480ae33
SHA1

720ebfcee4021d5eafdf53ebfc0cb67e543099b8
SHA256

9e60fede215031d8ede6398ea3c06696642b491437dd9e2425eaf6f2072b56cc
SHA512

1394ffbf123128498f450d51c5def775e2ecf7476687ce8304697b1b377fe9d5dd7910d73913bf0067bca04bddf5ea5a9847d8184c00ee4917786cb1da200a7d
SSDEEP

1536:N0G68q0lMWFhsUqn5C2AF8QL0pyCWLVdRUd872ZEAhiIgtaAoUEkIRTBVbXS3euG:618BMv3DuwnH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c3e82b7baa8bd2f8da8ab5a5480ae33_JaffaCakes118

Files

2c3e82b7baa8bd2f8da8ab5a5480ae33_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1d60ed3fd40fc31a1280d0dcc27ef168

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord598
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
ord563
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord608
ord717
ProcCallEngine
ord644
ord537
ord681
ord100
ord581

Sections

.text
Size: 590KB - Virtual size: 592KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ