2bf07288dbf3b1c392bfb96ff4f36652_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2bf07288dbf3b1c392bfb96ff4f36652_JaffaCakes118
Size

108KB
MD5

2bf07288dbf3b1c392bfb96ff4f36652
SHA1

8b1520fa62f1de1ffa554b0791d1d0bbc2675c9c
SHA256

e074fc12080e6ce7bf3fb63fa720ca7201ee964fadbb11f9c5ccf44443c65bce
SHA512

a852cef0f5cb9a4159a4be3abd7834d7814e3da2779bffbbb35bc5412675ff2546d1a105fc4c55dee16735f5994d751cf057086f8ba9ab8df598cd119dcd990e
SSDEEP

3072:+3gUeAnabB62lGTchmVxFZBFZ96UDXKN91z6:uRJTchUxFZBFZ96U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2bf07288dbf3b1c392bfb96ff4f36652_JaffaCakes118

Files

2bf07288dbf3b1c392bfb96ff4f36652_JaffaCakes118
.exe windows:4 windows x86 arch:x86

be1617ee0f5f86c2e174e51aeb84f4f5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord595
ord598
ord709
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord713
ord607
ord608
ord717
ProcCallEngine
ord537
ord644
ord570
ord685
ord100
ord616
ord581

Sections

.text
Size: 100KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ