2c64ee47cdf278c8e2f3881fd72ff9ea_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c64ee47cdf278c8e2f3881fd72ff9ea_JaffaCakes118
Size

26KB
MD5

2c64ee47cdf278c8e2f3881fd72ff9ea
SHA1

2652bfcf9a133968edacee123ed1850367238ec7
SHA256

7aae95f4ecfbb50f305a05f76262b9a2ac445323385cffa8ce0c0d115774c386
SHA512

f7cbb38b0640b0fe7b4ba869eba70501c80b94435872dd0404d23e3719918786a119b4e225c9f6b554755ff042fb29e59b2092047e2e1493ff955b5a68e3f959
SSDEEP

384:1M3PnQoHDCpHf4I4Qwdc0G5KDJ6JYOFBdzRFATuoStByF8lm:1m/QojCpHfx0NOJRSTuyF8o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c64ee47cdf278c8e2f3881fd72ff9ea_JaffaCakes118

Files

2c64ee47cdf278c8e2f3881fd72ff9ea_JaffaCakes118
.exe windows:4 windows x86 arch:x86

96e57d09efd03a48c83f1349e435734e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord666
ord598
ord709
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord607
ord608
ord531
ord645
ord570
ord576
ord100
ord617
ord619
ord580

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ