2c50272d9bea684264cae00949811873_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c50272d9bea684264cae00949811873_JaffaCakes118
Size

28KB
MD5

2c50272d9bea684264cae00949811873
SHA1

22d3bc94f9fc99b30a2e176196b6e3cd51eac29d
SHA256

021e807834fe5cfed74bb748825b89bc671828fbe4ba9594f20c6bcd64eef5b3
SHA512

ceba0d9deb7ca27a7e7fa0bca1ff1e80ce9a1a365469933c58065759be727e6fffe91f1d79bb673b99003db3671ef200aa79f6eee44eaeb36ac064825a9f28b1
SSDEEP

384:ai2WBWURbN/GNKZOCiJYhRAzp9xscvJwK9oeAPgaETt7MSTf1Bs:kWHRpeN1pJYhRe9xseJieAoaETt7MOv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c50272d9bea684264cae00949811873_JaffaCakes118

Files

2c50272d9bea684264cae00949811873_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f48d52e34aa1827cbe193badf7155e77

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord666
ord598
ord520
ord632
ord526
EVENT_SINK_AddRef
ord561
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord645
ord648
ord570
ord573
ord681
ord685
ord100
ord613
ord581

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ