2f70094a2d21c059573b1c9aef87631e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f70094a2d21c059573b1c9aef87631e_JaffaCakes118
Size

2.1MB
MD5

2f70094a2d21c059573b1c9aef87631e
SHA1

ce28e6618ec6a4594a866f5552369d7c2224320c
SHA256

986305c2b88620313642c20b28bebcc6b379a2d9f347d9ddaada2afd6ddfe29c
SHA512

d9cc603d0a0b14a682610b275df621f1fea7407051cc038de2e76fe06be53bf9a49ff128088acf705e6b0f8056d6e075c5d4ab0220667a4404defee7c8c7dfbb
SSDEEP

24576:woHTDjckIhDCmQc/cILydl1Fvu9ierM5j+zSHBzvMxPAWwHV:djiDd/cLL29ieaXBzvMxPAWaV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f70094a2d21c059573b1c9aef87631e_JaffaCakes118

Files

2f70094a2d21c059573b1c9aef87631e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5b7c86441baa332a5dde8bb1f9e90e51

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord660
ord666
ord595
ord526
EVENT_SINK_AddRef
ord561
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord530
ProcCallEngine
ord570
ord100
ord610

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ