2c964728cb92674d6aba50a6e65269d2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c964728cb92674d6aba50a6e65269d2_JaffaCakes118
Size

1.8MB
MD5

2c964728cb92674d6aba50a6e65269d2
SHA1

69e22096282c40a08c853023ce632d00f9943086
SHA256

a29176ec26f37de7a43c5af323a6f9782a904f661700e98dd25e7d88fa55210c
SHA512

626bd86ed0191b3e5613231e8c6afe44d3c76abfb62c721bf3531d65eeb916eeec20fa22e6d3ca6461327ea8a6d39d4e708f264104ed11724d74cbe6118a3c97
SSDEEP

24576:TzyLCkq1ubIGl1pzzHP/vXM/wu/p3X5eW4MmwlAZM8yB:TzaPM/p374moMb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c964728cb92674d6aba50a6e65269d2_JaffaCakes118

Files

2c964728cb92674d6aba50a6e65269d2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1299edca09c96e0ca0a7dc8a1ef9d459

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord588
MethCallEngine
ord620
ord621
ord516
ord517
ord519
ord595
ord596
ord598
ord599
ord631
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord714
ord608
ord531
ProcCallEngine
ord537
ord645
ord570
ord648
ord571
ord681
ord685
ord100
ord616
ord618
ord619
ord580
ord581

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 596KB - Virtual size: 595KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ