2faa5436f086706211a24c725841defc_JaffaCakes118 | Triage

Sharing

General

Target

2faa5436f086706211a24c725841defc_JaffaCakes118
Size

126KB
MD5

2faa5436f086706211a24c725841defc
SHA1

5f26bd3f29251c09094f7e2cdc43ff02ef679f13
SHA256

b93b5f6bf758f19f60d385a1406423e364b2d4ce13fc648ad8e681131a31fffc
SHA512

20f62981c96baacb8f9e330f5689db30db7746d53e6ba39136f6d25bd2aeebc7e0bf1d368f67a0d00a884898efc9a92a8dc48c003b8a8d750e7b12afd30805cb
SSDEEP

3072:LMjvZOR1DPhCtefXInkm0kaLLcKn9OS0qvaCTE90pY:mIR1dx/Ikfk8/0eptm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2faa5436f086706211a24c725841defc_JaffaCakes118

Files

2faa5436f086706211a24c725841defc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

027388605e15fca8094c9e34c149b3bd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ShowWindow

msvbvm60

MethCallEngine
ord516
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord100

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 107KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ