259eee35264a904f446c6967a12a7ea9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

259eee35264a904f446c6967a12a7ea9_JaffaCakes118
Size

60KB
MD5

259eee35264a904f446c6967a12a7ea9
SHA1

2c1fec4adf9f7aefbb71b029296eb5c927698090
SHA256

19706d411ca2d4be43747dff9754180e1ea82a3376e2023f36b9719e4ab372ed
SHA512

192b84b8c4fb6bd19f43ef13570b161a73f63e80f2e5c474f90a21118709192aca07d3b791231cdfe6759a52c68ddba3d57fb6e91bab2ca154ae2919f9de80e3
SSDEEP

768:d7rMIhZ5FYweQKDLvJ9S44BaMhwaOZWf6v4duK8zjknb:pwIh/FyQKPT9Mh3OUf6v4duhzjknb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
259eee35264a904f446c6967a12a7ea9_JaffaCakes118

Files

259eee35264a904f446c6967a12a7ea9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

14bd4224c5dc81a60ca18dad4326b9be

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord517
ord518
ord519
ord666
ord593
ord594
ord598
ord599
ord520
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord713
ord608
ord716
ProcCallEngine
ord535
ord685
ord100
ord689
ord616
ord617

Sections

.text
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ