2544a9c35ad41c9dd02a3a9fcd8be08b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2544a9c35ad41c9dd02a3a9fcd8be08b_JaffaCakes118
Size

544KB
MD5

2544a9c35ad41c9dd02a3a9fcd8be08b
SHA1

d8a650084fb55eab848d1feb419e3794b35904ad
SHA256

0a2b5600655346708b778ecbf3f1bd47482874dfcf975cd568132f620574b862
SHA512

e9fa9806f7729db89f58a602619839c422cd4897b0f2109adae3aebd1545865ae370081c6386029590e0c6c14f69871047701520d74ecd5c822d07124298efb7
SSDEEP

12288:Ct8/SuHS24dAn+THPaIdVKDdN/aVSXmtBbiqW5XI:9tpsaIdqoSXmtj+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2544a9c35ad41c9dd02a3a9fcd8be08b_JaffaCakes118

Files

2544a9c35ad41c9dd02a3a9fcd8be08b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a6aed16c7062d54de19c30de9f1dec57

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord593
ord594
ord595
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ord716
ord717
ProcCallEngine
ord537
ord644
ord573
ord681
ord100
ord619
ord581

Sections

.text
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tiro
Size: 476KB - Virtual size: 476KB