2dec5e30df1c0f060dea6b69fe26c187_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2dec5e30df1c0f060dea6b69fe26c187_JaffaCakes118
Size

23KB
MD5

2dec5e30df1c0f060dea6b69fe26c187
SHA1

478c24bc5aa1d2cf268a5019be0c7200829e5993
SHA256

dfc07ad7043ec8347213f3158790ae5dbb6cbb9c48ba9845dc7e5e0429a17e6f
SHA512

9ce05b107997b43d0f7723fbbaaacf0596ebe7d9c4b8c62fd35fedb630ceb630afb8bbac88d788f4831a4b484cf61d660ca921b0b1edafea6174be7cfb7a6dae
SSDEEP

192:DYJqsT2KOagf0E02ATP2tKIJ8BJ2LUBNHdsJ/9WgQ8eObcbhg1yIo+BoDiiJAigE:DW20sXGIaBJ2LKtSJ/9WoeObieo+sL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2dec5e30df1c0f060dea6b69fe26c187_JaffaCakes118

Files

2dec5e30df1c0f060dea6b69fe26c187_JaffaCakes118
.exe windows:4 windows x86 arch:x86

da93db48df4958233b564e1ec6771b61

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ShowWindow
CallWindowProcA

kernel32

GetProcAddress
LoadResource
SizeofResource
LoadLibraryA
FreeLibrary
LockResource
ExitProcess

msvbvm60

MethCallEngine
ord516
ord518
ord520
ord522
ord631
ord524
ord632
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord717
ProcCallEngine
ord644
ord100
ord617
ord619

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1020B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ