026d55f026625f5b84c6fce44a45b17c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

026d55f026625f5b84c6fce44a45b17c_JaffaCakes118
Size

100KB
MD5

026d55f026625f5b84c6fce44a45b17c
SHA1

58c0c0319f8569499eedd8ff3dda680aa7c4cb02
SHA256

0a1168dc77a62ab491f85d15b82ee5fd30f690cd33165c3266279f699dd66487
SHA512

e8c36c31fb4c5bc7150bbe734d3d9b421a1f1f30349e24977f7912f10e4f27f7de78a813b65d0a83dec9909c41d896f2a6bf7a96f7c2a24ea139f328dc787f7e
SSDEEP

1536:IwXcX2203Q8xJcIRGWcOWPWvXArnY1ZPBizyesDNIjnZz:VQQNJizyeACnx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
026d55f026625f5b84c6fce44a45b17c_JaffaCakes118

Files

026d55f026625f5b84c6fce44a45b17c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9993a71410e148077d8c1b14291428fa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
MethCallEngine
ord516
ord518
ord519
ord669
ord520
ord709
ord631
ord632
ord526
EVENT_SINK_AddRef
ord527
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord608
ord717
ProcCallEngine
ord535
ord537
ord644
ord645
ord648
ord681
ord578
ord100
ord616
ord617
ord618
ord619

Sections

.text
Size: 80KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ