2abf379fd1526b596d02f300977e0ef9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2abf379fd1526b596d02f300977e0ef9_JaffaCakes118
Size

2.4MB
MD5

2abf379fd1526b596d02f300977e0ef9
SHA1

aa987e6ddd8b4b8d973dd7e32cf819c920bfe01f
SHA256

613acacb527a44f39af678799eae76b8d1b64ed3c9a90db2f77d92f4e55cf18b
SHA512

410f0d3adb6a72818f08c7732ba2c8d321a8a5cb25bac2bdb0202ba94329e53f072038d65334d72be144cdf76237d2746fe194266e0c6e23ab4fc121b3cc6646
SSDEEP

49152:fYVA0M2xkTpFe57408W3y2zs6qzhNuND8kcoEQY2+87jKgCN1OsxngJK5wmRsI3h:fYC0M2Vsk3Xw6qzhNmIzzQY2wgCus1gx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2abf379fd1526b596d02f300977e0ef9_JaffaCakes118

Files

2abf379fd1526b596d02f300977e0ef9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

713e93fc6d97ee4e8e78368e40769518

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
ord698
MethCallEngine
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord608
ord717
ProcCallEngine
ord644
Zombie_AddRef
ord100

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ