2e6a1c0fc28e48066cf689ff37d0bd7a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2e6a1c0fc28e48066cf689ff37d0bd7a_JaffaCakes118
Size

68KB
MD5

2e6a1c0fc28e48066cf689ff37d0bd7a
SHA1

c82c34d2e0d706ab815b7d785f35559e9c759f11
SHA256

053438748f9c6b2921c247e58ded71e6d7398088546006a5c175e031640f6020
SHA512

731bb0b6ca5352ff472197fe5c88488d8fa02c4a598c88db4616d2ee66d2f8246c549f495dafafa9f1aa551da4d3ee7602f695e02878d9f635f79ac89c629b7d
SSDEEP

1536:C5LZtZnMOyglFh1Jxh3B0SA3h3BDnMOyglFh1J0LZt:CND7AJu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e6a1c0fc28e48066cf689ff37d0bd7a_JaffaCakes118

Files

2e6a1c0fc28e48066cf689ff37d0bd7a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e55f76fb0cef5e2a5c36a1dd94023cd5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord593
ord300
ord306
EVENT_SINK_AddRef
DllFunctionCall
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord716
ord685
ord100
ord581

Sections

.text
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ