2b614b651b70244a278405528a2bd8cd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b614b651b70244a278405528a2bd8cd_JaffaCakes118
Size

520KB
MD5

2b614b651b70244a278405528a2bd8cd
SHA1

23e0480318e073de0565a73a5305357f0609c18a
SHA256

d107193669292433022a3cbe80f44359cdfe1124b9a804c079a669dc68c8e6ec
SHA512

65b807c4811c04fd93a315cbf7bb331793b38d7ab5a68903c48513242b960cfdd5080db3d861110e2ae860d2d59a03b8791abf87f5273d272f7d328f027f2f2b
SSDEEP

1536:yJ/Px1mrlhwqjxKWsTSQDzpnaX5xzOQZk7btwh8e9t7LgJp7myCZBU7z7a1bDaqa:0Q37u0qqrdO+KzxwqeIdr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b614b651b70244a278405528a2bd8cd_JaffaCakes118

Files

2b614b651b70244a278405528a2bd8cd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f4662a886a43e5fbeef3dd12ed6d7b6f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord631
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord717
ProcCallEngine
ord644
ord537
ord100
ord581

Sections

.text
Size: 484KB - Virtual size: 484KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ylnzmfl
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE