2eb02defa638f23d86ef26697d7ed700_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2eb02defa638f23d86ef26697d7ed700_JaffaCakes118
Size

24KB
MD5

2eb02defa638f23d86ef26697d7ed700
SHA1

1195f11368bc311b87e5f068bf1f772ba19e5beb
SHA256

b2324a256cbf2b933f8cdd18f0d9aa32af4e492660083ff4738dd62a82b62824
SHA512

d4c0244029251fd9d37839e56d850df71b9e193e33970b1825a197664143c453da8f701a089dc08751cd73d0d888325f569cf037dee4461717e88a30ef1f3df8
SSDEEP

384:2AszknViPMLEaIkc7tW2FaDJYrI2KApEK9jdV4s:RszknViULad7tW1FYrfKApRj/4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2eb02defa638f23d86ef26697d7ed700_JaffaCakes118

Files

2eb02defa638f23d86ef26697d7ed700_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c02d86d79d9a17514c1e211dfe470fd0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord665
ord526
DllFunctionCall
ord670
__vbaExceptHandler
ord711
ord712
ord717
ProcCallEngine
ord644
ord570
ord100

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ