2cd6bbd09ad85cbf89838b00d6ea072e_JaffaCakes118 | Triage

Sharing

General

Target

2cd6bbd09ad85cbf89838b00d6ea072e_JaffaCakes118
Size

36KB
MD5

2cd6bbd09ad85cbf89838b00d6ea072e
SHA1

16b07f6d368d1625481fa787eadd008ac4f7ff10
SHA256

1ae0f4985d1c12ac6ca2100f1f92d1208263c10e524535a6d27ec5e7b3f3f586
SHA512

a196a80025d51adc2d3955cfe4a151058ef0aff8690209b8d8a6970956f28db9cd98d8dc1ed95d3a883136f1a15dc661a77d076719011ac9dadf9ea6177ea55b
SSDEEP

384:C52HOo97fkDASlJc5IB1dBx2SGct9JcInp5wyWq2BzSQEt:Y2HOefk8NvSGctDL2Sb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2cd6bbd09ad85cbf89838b00d6ea072e_JaffaCakes118

Files

2cd6bbd09ad85cbf89838b00d6ea072e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

eb9ab72ab5a1138ce053318c41dfd3a8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
MethCallEngine
ord516
ord660
ord598
ord306
ord307
ord709
ord631
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord716
ord717
ord318
ProcCallEngine
ord644
ord570
ord648
ord685
ord100
ord617
ord619

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ