2f85fa9d048e0248d3269b080a62c293_JaffaCakes118 | Triage

Sharing

General

Target

2f85fa9d048e0248d3269b080a62c293_JaffaCakes118
Size

328KB
MD5

2f85fa9d048e0248d3269b080a62c293
SHA1

1ac20bc68d89e082d6b5d0a65a2a4f90f7f37ea7
SHA256

b6c781e1d5ca31c46b7f40ca6b6310f7228be00ff10885d53edc64b253cd028f
SHA512

eebd4bd880b56e6bd7ec82e2be4597f5f8ba8205e360a7549a0587fb710e5d8fdb6770bb6557dbd1f724976f6b07827c02b9f3f7adde9fa819be44fbead06465
SSDEEP

6144:owI036q0IzQbR5G0dREeQU1Mw4FW0BbcAz3q9Th3GMK+:i036q0IcbRzLEvU1Mw4Q0BbPw3V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f85fa9d048e0248d3269b080a62c293_JaffaCakes118

Files

2f85fa9d048e0248d3269b080a62c293_JaffaCakes118
.exe windows:4 windows x86 arch:x86

13ec1e7ab42445fa36a9f0de06bc409f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

pstorec

PStoreCreateInstance

msvbvm60

MethCallEngine
ord516
ord517
ord518
ord666
ord667
ord520
ord631
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord608
ord717
ProcCallEngine
ord537
ord644
ord645
ord570
ord648
ord571
ord573
ord100
ord616
ord617
ord618
ord619
ord581

Sections

.text
Size: 68KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 256KB - Virtual size: 255KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ