2f1cec13287e2cf668263172e0c57a66_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f1cec13287e2cf668263172e0c57a66_JaffaCakes118
Size

100KB
MD5

2f1cec13287e2cf668263172e0c57a66
SHA1

2e88e22d91d0616ebe4fdfaa0d996bc28fcda520
SHA256

78289cf2829c92611f8a951c7c2f7ebadcb2c665d3a876c55f4e7082c4974a88
SHA512

fb983303113f654edf48b12cbcf6c12614a5f45f5ac46cd7b6d0546f0cf419ef179049bd5ba3e3db389532c50588e65463953e38d3628c95acd2ce2957042ed4
SSDEEP

1536:yq6oy3gRYyfCkJFuTrgsuKKrXzrRUa+jkxc4Pu3Ay5vnreHS+A0kJH3Tp:ycvfCRTrgWn+A9JHt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f1cec13287e2cf668263172e0c57a66_JaffaCakes118

Files

2f1cec13287e2cf668263172e0c57a66_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a9bc04e29780f70d67c333157b6553ec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord595
ord598
ord525
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord608
ProcCallEngine
ord100
ord616
ord581

Sections

.text
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ