2c6d8ef0c569294a1b0f0e455346a170_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c6d8ef0c569294a1b0f0e455346a170_JaffaCakes118
Size

92KB
MD5

2c6d8ef0c569294a1b0f0e455346a170
SHA1

4db5efde0d35936168425c4996910d886085025a
SHA256

2d85d93ede77f23e4a646cbe1c3a9dd99310fcfb47675042a0ce42c86c4014df
SHA512

a34d3351c7c7590080bfa4986acc0a9376b471be1dfe9259503da22fc2066f3fe4cd25934cd143aa82e745157470beb80d3be0e9430812e94aa17496b60c914c
SSDEEP

1536:KTHsHZ3kCDkjzfwDPB5Q0+LAwBlkpgdn4:K7sgzcPUAo5i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c6d8ef0c569294a1b0f0e455346a170_JaffaCakes118

Files

2c6d8ef0c569294a1b0f0e455346a170_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cc24ece30f1d53562edfc0d86a74527d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord558
ord595
ord303
ord309
ord709
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord713
ord608
ord717
ProcCallEngine
ord644
ord537
ord681
ord578
ord685
ord100
ord616
ord581

Sections

.text
Size: 80KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ