2f4dc0a483fb50945ff6fcc796409bcd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f4dc0a483fb50945ff6fcc796409bcd_JaffaCakes118
Size

120KB
MD5

2f4dc0a483fb50945ff6fcc796409bcd
SHA1

7cbc342b2e6c2cd5161cb660f5901bac16c542ec
SHA256

ae176780f7aabdfe24cce96d9cefc494346b9f69afe8d7389b1c52d37bd0989a
SHA512

61216d27866f9f53acf0693f2dcc3853384ee430f0a1a3cb747a8e2df5ed0243f52fd63b52a1468422aacecf763203a44d8a9430f5749123e5dd4705605c1624
SSDEEP

3072:Xua2nsBAlGm9OfLvcCiOVWjsEgqp+/lHkwa8fBQ+d:vPVSwIWkfuBQ+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f4dc0a483fb50945ff6fcc796409bcd_JaffaCakes118

Files

2f4dc0a483fb50945ff6fcc796409bcd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

edea5e9e67df8f8b24cf8e59d27d44bc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SystemParametersInfoW

msvbvm60

ord516
ord519
ord666
ord667
ord593
ord594
ord595
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord531
ord716
ord717
ProcCallEngine
ord644
ord576
ord685
ord100
ord616
ord618

Sections

.text
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ