2e5bf9d2ba8fb73f4535d2485231bcda_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2e5bf9d2ba8fb73f4535d2485231bcda_JaffaCakes118
Size

600KB
MD5

2e5bf9d2ba8fb73f4535d2485231bcda
SHA1

0dce1a9e0635ce64a773ebd43afdd153712d6516
SHA256

9d9d3983bf0da598e7491417f2506cccd133d2c85fd899ff133c668bda7102af
SHA512

026d65477f67d6e5b1a51b97c7d864b32b4acdc4d02dc5726764cc4e8781388be06f8b14b975032f82eb15a2d1765a2535f4d05f9ac1f19bbb077d4f387ec83d
SSDEEP

12288:gWLoCVIL0bbvZktEoEGCg+omP23jd5jDQ7Z77777l9Xc1v:gW8zL0/0E6Ofe3jTHu9M5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e5bf9d2ba8fb73f4535d2485231bcda_JaffaCakes118

Files

2e5bf9d2ba8fb73f4535d2485231bcda_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fc39d6bcccc6aed12cc7b3f6f5003c3e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord644
ord100
ord617
ord581

Sections

.text
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 340KB - Virtual size: 340KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

flsdtjr
Size: 200KB - Virtual size: 200KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

dvdjbsr
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE