d2f80f3ec2d21a99af417be922c3c586_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d2f80f3ec2d21a99af417be922c3c586_JaffaCakes118
Size

232KB
MD5

d2f80f3ec2d21a99af417be922c3c586
SHA1

001254f6bbb90560780fd819f3d4bff900c18dac
SHA256

f6b48122be57f0f047e6d4302613931ac82a7698eb5fd49553064d043ab238a1
SHA512

662e36aca03a13a6ab3a1095e7598ecd7060e7997dca84e17ffb35727321fdad002a8856e894e67738e9d08442f3064919bd220fddd4dba8f7f159af2648e0c7
SSDEEP

6144:T2JR6jBaplmtyCrAotVvp+/cWD0QBZeP2ljm:yJwd9y4JtVvp+EdOeP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d2f80f3ec2d21a99af417be922c3c586_JaffaCakes118

Files

d2f80f3ec2d21a99af417be922c3c586_JaffaCakes118
.exe windows:4 windows x86 arch:x86

852b6112fe25e123ee41640bc5110ef3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord555
ord598
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ord717
ProcCallEngine
ord644
ord685
ord100
ord617

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 208KB - Virtual size: 205KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ