2b765db414f4cb21568b111f2298de70_JaffaCakes118 | Triage

Sharing

General

Target

2b765db414f4cb21568b111f2298de70_JaffaCakes118
Size

132KB
MD5

2b765db414f4cb21568b111f2298de70
SHA1

c269b6c99c28ad796e96d30c28fd7f87418ced70
SHA256

39310bdcdd2197a53fbcf611240879cfaf1b8bd9e56d4742b0923e32c51d1d6d
SHA512

fdc4187c3c5370d577696b1d77a6e48db791118aea8e1eb5400418191de9c4335238fde80c31b0342da89638b3f454fb88cfc96a9bf7b27ce81ad8d22e738083
SSDEEP

3072:EHUfFmT+O5U+/iOrqK2E4DwwBVGS/Xgk:Jow+/iOrqK2E4DwwBVGS/X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b765db414f4cb21568b111f2298de70_JaffaCakes118

Files

2b765db414f4cb21568b111f2298de70_JaffaCakes118
.exe windows:4 windows x86 arch:x86

99e826ba78880a6ede15f96b9f789efd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

midiStreamStop

lz32

LZSeek

advapi32

DeregisterEventSource

imm32

ImmCreateContext

user32

RegisterHotKey

msvbvm60

ord187
ord588
MethCallEngine
ord621
ord516
ord593
ord594
ord595
ord599
ord520
ord306
ord307
ord709
ord631
ord632
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord717
ord318
ProcCallEngine
ord644
ord570
ord648
ord685
ord100
ord616
ord619
ord544

Sections

.text
Size: 124KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ