2f9ff11d6d0d5bf69d02486e2242576c_JaffaCakes118 | Triage

Sharing

General

Target

2f9ff11d6d0d5bf69d02486e2242576c_JaffaCakes118
Size

44KB
MD5

2f9ff11d6d0d5bf69d02486e2242576c
SHA1

39e24b76c66981af342a3e286dab34dc98b16ad6
SHA256

7332d3a937f3b1eda992c1c9dd65653f45d7604c4805b93790ae6db429173abe
SHA512

67ba71658cfd38242975146f8fcef61ffbccbc18066f4168d4f7f52351d82a0ec551ff19bb37ac4a8946285e8ac1e7bff3e7c0d7ee51c78270d5825a88e209cc
SSDEEP

768:WrHUBvT0fKz412RFPRVtVDc73GV2ZZ8jhVZF2M:W8r0k41QVboiV2ZWjD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f9ff11d6d0d5bf69d02486e2242576c_JaffaCakes118

Files

2f9ff11d6d0d5bf69d02486e2242576c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ebc20a2f09abc40459ab86d9ed3b4dcc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord519
ord593
ord594
ord595
ord631
ord632
ord525
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord607
ProcCallEngine
ord537
ord570
ord648
ord100
ord616

Sections

.text
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 660B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ