2c36dee52b5569487dfc2ecda8a37973_JaffaCakes118 | Triage

Sharing

General

Target

2c36dee52b5569487dfc2ecda8a37973_JaffaCakes118
Size

536KB
MD5

2c36dee52b5569487dfc2ecda8a37973
SHA1

135a70de10cad4c248f90b8c07476193f7256329
SHA256

1488c871975eb6f742fc9ca0d152fe3cc310feef4d025ad558cc10b70d9b9319
SHA512

0d7a8464442d25a7bfbfb7ceb766578a1ad68bae895f8dca457e9aece346f70615f6bc7a2faab899d842b3795f3083b0d32ab1b994f547892e8ae3b726db91e4
SSDEEP

12288:nLNcH/Xwu/sro3X5Azmgh1R3/n0aRz6mHGP:nO/wu/p3X5emghH/0wzdHe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c36dee52b5569487dfc2ecda8a37973_JaffaCakes118

Files

2c36dee52b5569487dfc2ecda8a37973_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9467ed304c6926bcc5d34be672b32df8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord593
ord594
ord595
ord598
ord520
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
ord561
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord608
ord716
ord531
ord717
ord532
ProcCallEngine
ord535
ord537
ord644
ord645
ord570
ord576
ord685
ord578
ord100
ord610
ord612
ord613
ord617
ord546
ord581

Sections

.text
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 468KB - Virtual size: 464KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ