2e2a34ac0b01e7edf6e59edeb1ed62bb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2e2a34ac0b01e7edf6e59edeb1ed62bb_JaffaCakes118
Size

16KB
MD5

2e2a34ac0b01e7edf6e59edeb1ed62bb
SHA1

d19d7950f38793e7753b71f1e0c8f7c0fee4a9ba
SHA256

124258e14b1a12cc3ba236a60b639883c841e76b275b4d09f9e5fa385e586f6f
SHA512

df2ed8888676f0db3fa39d2e3ff23dc36dcbfaa0f2ed3b96c9feef2f100c6094838c4bad5550470f4e17a45f2cc83387e66666f3478269f6882b28e2d07d79dd
SSDEEP

96:uPlFasoxhuKto/I+kfZ0AESqVMxjmhhe8fa0VY8UE22:EFCx0Oo6iAIexjOeeRUE2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e2a34ac0b01e7edf6e59edeb1ed62bb_JaffaCakes118

Files

2e2a34ac0b01e7edf6e59edeb1ed62bb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

13d8790bb001e17e58125c6e71632c48

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
ord516
ord666
ord598
ord631
ord632
DllFunctionCall
ord600
__vbaExceptHandler
ord711
ProcCallEngine
ord537
ord648
ord100
ord689
ord610
ord616

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ