b2e619e859603caed6730580106a00a8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b2e619e859603caed6730580106a00a8_JaffaCakes118
Size

32KB
MD5

b2e619e859603caed6730580106a00a8
SHA1

afb51cd625ad7e264858e022fd25cecb244b8e31
SHA256

b664c116fe6cdfa093b91a8c8839a9881e3fb1be8cbd44e12bdf384f0b6d602a
SHA512

c98983cd23d496471e3dca8b0f485cf3751ff69e3c53a847973110df016074f40c5a2b32594d1f80b65a3f20dddd789a110edc407549199b0563478508f9da47
SSDEEP

768:k9QaUNrkrRB0tCnJuXwhIwSOWRoa0stzBFG:k9ZNICnJewWoa0oFG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b2e619e859603caed6730580106a00a8_JaffaCakes118

Files

b2e619e859603caed6730580106a00a8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bc5a6e61b14b948c8deeccce38f2cd4c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ShowWindow
CallWindowProcA

kernel32

GetProcAddress
GetModuleFileNameW
SizeofResource
LoadLibraryA
LockResource
ExitProcess

msvbvm60

MethCallEngine
ord516
ord631
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord100
ord616

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ