2f692652f21da352a8d7243d22e46192_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f692652f21da352a8d7243d22e46192_JaffaCakes118
Size

416KB
MD5

2f692652f21da352a8d7243d22e46192
SHA1

284e6df1ad6d8bbd337363158863b0e82829df3b
SHA256

6819cc53928e59625251de44a7d435a52774e93b2d098c63843c61bba183df88
SHA512

0f7dba95f120c92582ada2ed7d44acc7854747ef39f7210fc14dbd2cec22bb6d8ad58fb3514dce49c9cda7862be79286968fd0450c23e786559efbee9641f22a
SSDEEP

3072:eRFEGhkNl0Hj7bGREaZ09hKAoibkFT6rnhZhIibN5JS:wfo0/CSThKAookFT67hbISs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f692652f21da352a8d7243d22e46192_JaffaCakes118

Files

2f692652f21da352a8d7243d22e46192_JaffaCakes118
.exe windows:4 windows x86 arch:x86

71ab4b72fc270af26a474b74e556e9b7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord598
ord631
ord525
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord608
ord717
ProcCallEngine
ord644
ord537
ord578
ord100
ord616

Sections

.text
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 368KB - Virtual size: 366KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ