2eb33bff510c0f6afeb9a801a975f942_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2eb33bff510c0f6afeb9a801a975f942_JaffaCakes118
Size

240KB
MD5

2eb33bff510c0f6afeb9a801a975f942
SHA1

ea70e65bf51331dd371e72e7ff38af4b478e998e
SHA256

fd159f85d0e92e107ab4a1a96b3e086f705280b8b346ab769e7bec01c3fad1f1
SHA512

bac7152631b553726f65bb64f12b50b3adbde927537d4088392c94ae56f409fea3b19d0d1be7076c49b635c88c0ac1d7197dd180a0e69418d80f2b9f0599794c
SSDEEP

6144:pUC3dwqsNwemAB0EqxF6snji81RUinKchhyqSQ:3dQQJsl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2eb33bff510c0f6afeb9a801a975f942_JaffaCakes118

Files

2eb33bff510c0f6afeb9a801a975f942_JaffaCakes118
.exe windows:4 windows x86 arch:x86

efafd579ca679191f29641e38a03e217

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
MethCallEngine
ord516
ord517
ord518
ord519
ord669
ord520
ord709
ord631
ord632
EVENT_SINK_AddRef
ord527
ord528
DllFunctionCall
ord564
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord717
ProcCallEngine
ord535
ord537
ord644
ord645
ord648
ord681
ord685
ord578
ord100
ord579
ord616
ord617
ord618
ord619

Sections

.text
Size: 208KB - Virtual size: 207KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ