26039e1888ff5a58ee62844c73e5c394_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26039e1888ff5a58ee62844c73e5c394_JaffaCakes118
Size

26KB
MD5

26039e1888ff5a58ee62844c73e5c394
SHA1

30becb483d6e6cd4ae242b5b3d3627ab764f3e1e
SHA256

4b78b1416d92873d1d9b4a8f5e9ca9f87ec56b2e935566117699f0d5c5f9aef7
SHA512

1ed0ddc61655418a624857af02c3d95c59b353db59bac082f2845c576d0614c651fe22f52f6735a3ec811a6e909bbf109a4a5a65f32ab3cf6c019392b0904379
SSDEEP

384:4L+q5r+PpHfXhUkKvI4QwjQNa5KDJiMFoe7vfO1Ld7:4a4r+PpHfXGLOFiMF3vgLd7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26039e1888ff5a58ee62844c73e5c394_JaffaCakes118

Files

26039e1888ff5a58ee62844c73e5c394_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b1332fc8454ed69bea840c0dc3a3695f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord660
ord666
ord598
ord709
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord607
ord608
ord531
ord645
ord570
ord576
ord100
ord617
ord619
ord546
ord580

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ