2fb016d90a923bbec4d02e2ee579ddb6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2fb016d90a923bbec4d02e2ee579ddb6_JaffaCakes118
Size

136KB
MD5

2fb016d90a923bbec4d02e2ee579ddb6
SHA1

a9e184552aab78cb6f179257d19c6c79d283fa6b
SHA256

c6cd0459f4a60258fbff63206f24e1a891b1f2279a7bcf375e5d51ad442fe6a6
SHA512

673c540be08776b62d29b78ff7b4a9bd0a5e0750c4e329d369cca0dd2b75e24d75e09eda8b2ca6eab3ad270997bce3753b8ac9bd182c9552227bd5971d2b2933
SSDEEP

1536:gF0oN1+F6eKZO2DXseqFC9jtoIKk5M8nKJS4p5oaLBhHSN/y+Vfh:9oyFpEO2DXseqSo05xx4Qbk+5h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2fb016d90a923bbec4d02e2ee579ddb6_JaffaCakes118

Files

2fb016d90a923bbec4d02e2ee579ddb6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5e6d3c3d493cb620981b1c566e07e126

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
ord697
ord698
MethCallEngine
ord516
ord517
ord518
ord519
ord594
ord301
ord303
ord598
ord306
ord520
ord307
ord309
ord631
ord709
ord632
EVENT_SINK_AddRef
ord527
ord528
DllFunctionCall
ord563
ord670
EVENT_SINK_Release
ord679
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord710
ord711
ord712
ord607
ord608
ord318
ord717
ProcCallEngine
ord535
ord537
ord644
ord645
ord680
ord681
ord578
ord100
ord579
ord689
ord616
ord617
ord618
ord619
ord544

Sections

.text
Size: 112KB - Virtual size: 110KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ