2647a989b51972988626940c7f892845_JaffaCakes118 | Triage

Sharing

General

Target

2647a989b51972988626940c7f892845_JaffaCakes118
Size

184KB
MD5

2647a989b51972988626940c7f892845
SHA1

e48d5dfcd1bec3e72227e142569db24d61d81bce
SHA256

9b7298e49619955b6f502bc72977978c6676feef0b65303d7c5864b1c12f98b3
SHA512

6efe0f136dd0ea0b3abe70adc6f24173bd2b321fc3480aeff1302958a0485558507106d41db12f1c5d2bd52f1eed38e32833b426a9915a7e8723e4d7b41c4e95
SSDEEP

768:VDfSLNMolU/1khYhh2sh3h5jzBTBzom5aDR5/KzgU4vyz5BFB+QdfEvzmDDxeJI7:VcVjsB7i4s2+mdfv6a04cb910

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2647a989b51972988626940c7f892845_JaffaCakes118

Files

2647a989b51972988626940c7f892845_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e7dea642127d9735a3a9dead67823cef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord665
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord644
ord100

Sections

.text
Size: 176KB - Virtual size: 174KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 996B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ