d2db8e04b5938191efd03e19419b98c2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d2db8e04b5938191efd03e19419b98c2_JaffaCakes118
Size

148KB
MD5

d2db8e04b5938191efd03e19419b98c2
SHA1

5c8f6f1532a52f2ea71026ce7e57b81998ea9604
SHA256

1f05f9613bb16558b8f128f7cdf96fae12e8bad7037e406c7d555880608d6710
SHA512

42984786b4d3829c94739e516f5acc566b8faad2594a9862b371c88466ff50bfd65b61b9696faa33da5dbfb48264d13bbd5bcf520843c55bd5edd1f5b1cde5e7
SSDEEP

3072:tI/gF85PDyEuX4iq/A2hyzK7D6zdA3+P+kdMTtK1x:tRh1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d2db8e04b5938191efd03e19419b98c2_JaffaCakes118

Files

d2db8e04b5938191efd03e19419b98c2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2afdd4f403a3ad64c6c4adbe1d38a60b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord628
ord665
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord644
ord100

Sections

.text
Size: 140KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ