2d59bac1ac1b8387280ae185e65b2514_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d59bac1ac1b8387280ae185e65b2514_JaffaCakes118
Size

144KB
MD5

2d59bac1ac1b8387280ae185e65b2514
SHA1

f6f779f338f6dc1270184d3f23f8c978287e2544
SHA256

e50b9d586849cf1d6b45047781db481c9aaec59798fb1f9a24d50cbc3fb59cce
SHA512

bdbdbfbe7f5d90acfe321ac15870aa1714a7188c3f6b4fbd98cb29429ca164b728f46da8fcb42fd3d0136b90670cc1b993a8757ed1dd44698308502dae008506
SSDEEP

3072:nYxD8zzUtLpc+NUI1jmvea04YviFbkk7M4WvWKxJ7ly:YpszUtLpDOsZ8YvUbxQ46xJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d59bac1ac1b8387280ae185e65b2514_JaffaCakes118

Files

2d59bac1ac1b8387280ae185e65b2514_JaffaCakes118
.exe windows:4 windows x86 arch:x86

68a93d81808566b3ae19568158b3f842

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord632
DllFunctionCall
ord600
__vbaExceptHandler
ord607
ord608
ord717
ProcCallEngine
ord645
ord100
ord617

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 764B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 136KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE