ce2b3f72a0e9e83ad5c47f6afa54f074_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ce2b3f72a0e9e83ad5c47f6afa54f074_JaffaCakes118
Size

136KB
MD5

ce2b3f72a0e9e83ad5c47f6afa54f074
SHA1

b1a8354abe4113fc251faf75ca8d58306eae7f63
SHA256

ef8a3e932ff0b0117783e7fc0963680e36ef02d670077019a71be09168207773
SHA512

7ebe9bd099a6e8b586461f611af2fc7a37bf1ef47caf30353d70dddf9a8602a398323fbadb1eebbf3867675506949a4ce2ec33964ade6f04ece863b3466d5103
SSDEEP

3072:tGVzyUYA6qcM+gBtz6uPG1/DNn+Gm1oP+amDeuL:cV2UAqcMEbl+GEok

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce2b3f72a0e9e83ad5c47f6afa54f074_JaffaCakes118

Files

ce2b3f72a0e9e83ad5c47f6afa54f074_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e3acd32fb5bb8097d41674ad084da243

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

RtlMoveMemory

msvbvm60

MethCallEngine
ord516
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ProcCallEngine
ord644
ord100
ord617
ord581

Sections

.text
Size: 84KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ