2904cdc99520d893f505282dc7466faf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2904cdc99520d893f505282dc7466faf_JaffaCakes118
Size

332KB
MD5

2904cdc99520d893f505282dc7466faf
SHA1

4592216b9ef2304150239bd1eeadf092c3a7e4f5
SHA256

ac04c311237a006b6b59969ac35976ee968b5c64aaf5d69beb72eb249ea0603a
SHA512

358c1bb458dcd2c7b62bce0d79647e1a0d768d9e804ee3a659bfa02bcb66b79f866040205ec6f21f48aee3a2fa4445b4eb7edb24c8aa7be73f903a815b9cdc67
SSDEEP

6144:87S77hkF/0SphyI9S4Sw+keS/2I2u+EFtKLHAswoWu+c+:AqMEI9ShRkfRDFtKLH9+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2904cdc99520d893f505282dc7466faf_JaffaCakes118

Files

2904cdc99520d893f505282dc7466faf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5dfc90d17f57851e6f14a6434d25e7a8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord665
ord669
ord593
ord594
ord595
ord598
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord537
ord644
ord100

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 284KB - Virtual size: 280KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ