2fdbe14ceb529596788f343a3f1c700f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2fdbe14ceb529596788f343a3f1c700f_JaffaCakes118
Size

24KB
MD5

2fdbe14ceb529596788f343a3f1c700f
SHA1

4f03062aefa4ba12676422efdbffcd76468b7fe6
SHA256

e8fd355501202ff2588486e56877d9dbcba0684bcc4cb5e6cd8bf03f281c7879
SHA512

5e006cae646492ad79bd661ec4540b74a282e1d081960ebdb070085c353fec78a8583cbb291854d0f01e71dbfe6b932f0398426d9e17af61327521deaa7523e9
SSDEEP

192:NBTE6wrF8CuvuARmnFleWT3TZQ6rBPLwf2z5Ni5wwbJ9Q3SOWfKvWAEw:f41kvu7vZQ6rRSgCfQ3SOWfKvWr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2fdbe14ceb529596788f343a3f1c700f_JaffaCakes118

Files

2fdbe14ceb529596788f343a3f1c700f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

aec489a4d5486864763072afeb434d1d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord100

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ