2dac1dab5e2694abecb64974413c575e_JaffaCakes118 | Triage

Sharing

General

Target

2dac1dab5e2694abecb64974413c575e_JaffaCakes118
Size

72KB
MD5

2dac1dab5e2694abecb64974413c575e
SHA1

0d214217825801228d5b471e14a45a418055be54
SHA256

e01931d6075d0515c2c8ccd043d8d7f322f6f58a2ab522bd3ab9a6de2cea6ca3
SHA512

d42feb7d35acb5f6934fcf60cf6c036f07a5c7436e1ba62ea278db793364768279f4f1da06b204163a73f8bb51f2908f993ecc271f56457392b01c9e43a13bb0
SSDEEP

768:OGyJIK/RsskYjUyXGeywyzYyhSda+I6NrZn5ytwg3HFpYPllLLv7G4CV4BDvIiy0:O9JbNUy27bjN6NJ5yVX8PlddvIiyFHB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2dac1dab5e2694abecb64974413c575e_JaffaCakes118

Files

2dac1dab5e2694abecb64974413c575e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

30093996e8d6e50774c849a213742616

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
ord695
MethCallEngine
ord513
ord660
ord661
ord556
ord595
ord301
ord598
ord520
ord307
ord709
ord526
EVENT_SINK_AddRef
ord528
ord560
DllFunctionCall
ord675
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord714
ord717
ProcCallEngine
ord644
ord572
ord685
ord100
ord617
ord619
ord546

Sections

.text
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ