2f61dffe2dffc1be66f4345e83c9883e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f61dffe2dffc1be66f4345e83c9883e_JaffaCakes118
Size

164KB
MD5

2f61dffe2dffc1be66f4345e83c9883e
SHA1

20c35a8cd4147776cabae7b0c34256f5e82d3522
SHA256

c64efa89eb3834c4120e9c582f70e53113aa347a99f67cbc021ae3e3c247630a
SHA512

bda59617f2e68d220310bca1df25c42639e20f7d1ae6b0199e67539c3b92b8da67e314c461cbf963d9b60b1b58245d49b95fadc1873fdcbc6b640788bcfa233b
SSDEEP

3072:Prx/RGy+QSJ9HGDDVMltvKBzjqgZX1Y3vhc80+85lfB:Prx/RGyPS3Hg6OBzjqgkm80N/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f61dffe2dffc1be66f4345e83c9883e_JaffaCakes118

Files

2f61dffe2dffc1be66f4345e83c9883e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d659c5f5b7b1fb7ecafd29ce281800b3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord598
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord644
ord572
ord100
ord618

Sections

.text
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 112KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ