2e6fab9c740271acf60dae985d33cbe7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2e6fab9c740271acf60dae985d33cbe7_JaffaCakes118
Size

108KB
MD5

2e6fab9c740271acf60dae985d33cbe7
SHA1

b3dce3570f13e3888d08e653767a840c3d674829
SHA256

c03cade0eda39df8359f337ef674ac7c1b0cbfc679a8e41ff5201a98e440b272
SHA512

03dc9e6c61e71bd396ee9edddcf7e5d936f99a5711f6ac903c8cabbcb4b2eb7f837f2dc13a5de8d106a85cace2c50186bbf7cc5ba922c896951b1b24d6ffed54
SSDEEP

1536:3XrkdcEfn8tb1TPMRcCPzyf9y2OSPYxWrrh910q:3yvA37P+CL1h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e6fab9c740271acf60dae985d33cbe7_JaffaCakes118

Files

2e6fab9c740271acf60dae985d33cbe7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6a1a8afe9f97b24fb85f94bf65ef417e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord665
ord631
ord632
DllFunctionCall
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord644
ord537
ord100

Sections

.text
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 980B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ