2f33565599b5868e142c82395c498f55_JaffaCakes118 | Triage

Sharing

General

Target

2f33565599b5868e142c82395c498f55_JaffaCakes118
Size

104KB
MD5

2f33565599b5868e142c82395c498f55
SHA1

c0e561623b7a631c4be2825ce9fd047ec0471903
SHA256

f54ffa8218b3ca399d95b32b24c0cd3e28f29233b7f154ce6807d1237bbd316c
SHA512

6bbe9e1fba0d71b9157857d27cbbf50f2f454cb58e198c35b270088a8dd9403e99e245df00519516068d6b64cc46320705f5ef030e51a4a8f34cb3f39dafb8c5
SSDEEP

1536:QmLRvx+u2Ds+HBchhQKNIqpOcQv0sTEFSocOoXjLl0iF:jX+eiKNZJQv0sTWo3miF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f33565599b5868e142c82395c498f55_JaffaCakes118

Files

2f33565599b5868e142c82395c498f55_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c92ac5d3ea599f7579e4e7d7f508cd86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

BitBlt

kernel32

DebugBreak

msvbvm60

ord582
ord583
ord584
ord692
ord187
MethCallEngine
ord516
ord517
ord518
ord519
ord592
ord597
ord520
ord631
ord709
ord632
EVENT_SINK_AddRef
ord528
DllFunctionCall
ord670
ord567
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord717
ProcCallEngine
ord535
ord537
ord644
ord645
ord648
ord571
ord681
ord578
ord100
ord579
ord613
ord616
ord617
ord618
ord619

Sections

.text
Size: 80KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ