2d3692d87dbebe69d70f806695a396c0_JaffaCakes118 | Triage

Sharing

General

Target

2d3692d87dbebe69d70f806695a396c0_JaffaCakes118
Size

46KB
MD5

2d3692d87dbebe69d70f806695a396c0
SHA1

7bc357eec022f1e7619b32362f07417bf3448a76
SHA256

b2041f58c58d0d57465312806019b676119e860cabbfd9457440fc9e7c2a01eb
SHA512

826d5849d598979b51b2849898f1578ca0ff1952d87262cbe63062bf8d77ae218c8de1c54b3949e028575a6d0912072d2f7e4c9132012def5ae3b87dc625d79f
SSDEEP

768:N5WINBGdDjGzz7k2KR3mU5ydEgnMfSqn2Efw2V7LTn4Z1G/tpgmeQ5mUm:N5LuDSzsZ3CEEmn42V7Pb1pVmUm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d3692d87dbebe69d70f806695a396c0_JaffaCakes118

Files

2d3692d87dbebe69d70f806695a396c0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

165b9e90d34c82476d0755857012b239

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord518
ord593
ord595
ord598
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord717
ProcCallEngine
ord537
ord644
ord570
ord685
ord100
ord616
ord581

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mmmm
Size: 4KB - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ