268bec4fbbb53f29dbaabf6e7979d84f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

268bec4fbbb53f29dbaabf6e7979d84f_JaffaCakes118
Size

112KB
MD5

268bec4fbbb53f29dbaabf6e7979d84f
SHA1

a9b1db6a6c1d756289638797449312d562c43e34
SHA256

7ab311e6d2260d6b42e1e7f576bf70526be7fffd0096cd1d28d3ff9758c38017
SHA512

92a677d9b9029d543ea47d21b5a1654dc583e020341a8664f22f452819abecd66ba3c87c4d8d28374f677c4412b8c66951e77823da0e6f6ad206b4576b24cdb5
SSDEEP

1536:jaBZpW4lfozsAn9br3mRppVPs64izWFMC7YgnOCFkpS7RFX0WlrdqNvw:j14lfo+CFkpS7RFX08dqNY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
268bec4fbbb53f29dbaabf6e7979d84f_JaffaCakes118

Files

268bec4fbbb53f29dbaabf6e7979d84f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a9bc04e29780f70d67c333157b6553ec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord595
ord598
ord525
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord608
ProcCallEngine
ord100
ord616
ord581

Sections

.text
Size: 104KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ