2df78c741e3bd80b374c81b7122417d2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2df78c741e3bd80b374c81b7122417d2_JaffaCakes118
Size

324KB
MD5

2df78c741e3bd80b374c81b7122417d2
SHA1

84e9201ab8dedbf988002c1f3864a22991b90b6e
SHA256

63f457066594f39893ebaa857293bfb0737f26bc770ed96146ca7d212e4133ce
SHA512

a6e4b27323b22be2e5c3d1e221e8b84e021a72b7c8a5e1ab1f87b882c282be084865969decebfde90149cc77d7dc987cd92b145644739c7c4e8c98c36ee6bf50
SSDEEP

3072:mX0e1FB/DpKjCLHAmrt4ncB3P1ceztGW5:BcB3P1TxGW5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2df78c741e3bd80b374c81b7122417d2_JaffaCakes118

Files

2df78c741e3bd80b374c81b7122417d2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

22896e36b09e10b4ceb2ce1dbd8c48bb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord665
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord644
ord681
ord100

Sections

.text
Size: 292KB - Virtual size: 288KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ