2ee069e15df47197de722965642f36e5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ee069e15df47197de722965642f36e5_JaffaCakes118
Size

22KB
MD5

2ee069e15df47197de722965642f36e5
SHA1

81bf055232cf31254bac32db19dd6df4d243d3ab
SHA256

4405991b7d4fd0bf56f7580760a756e3245067d3df33b97ce56060b36507edfc
SHA512

43b041a074e834ca2eaf210b6950bcef96bec69c09d02cde9fb2dabf8d0ef0ea77d3ad112a5994bde174a6b0f81fb8da29159994cab5104ee782c0eb043ce054
SSDEEP

384:26YFFFyBecgR010HzlX0t5SFMGDeMElby9VbFy:k3FRkmTNHDrnFy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ee069e15df47197de722965642f36e5_JaffaCakes118

Files

2ee069e15df47197de722965642f36e5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2f73554e0c69646628647b0c1751e8ad

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

endthread

ord516
ord632
ord526
DllFunctionCall
ord601
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord570
ord648
ord100
ord616
ord617

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ