26170e5b340f266186038340df4ea2e6_JaffaCakes118 | Triage

Sharing

General

Target

26170e5b340f266186038340df4ea2e6_JaffaCakes118
Size

224KB
MD5

26170e5b340f266186038340df4ea2e6
SHA1

9ac88a2559caaffc762b0b1e4c29debc024b3372
SHA256

f005dbf58c5dab1985756a2bb3c8cd9b4a1cf2863d9c424cdf4a59dddadc9b0a
SHA512

ece20e851156145a95f6916aa9419fd0daa48f9491936395093671b7027dddb3607656e16d77bb0d813e9fe58d63f98f910dfaffac97dfa2d0d7be19b419625a
SSDEEP

3072:A59QT8GlUNmJCGjBg4ua4StXpbeUayIV5UDOosisdcU2e3AJEUeBLL:AHQ7tayIVGDOZist2e3AJEUeBL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26170e5b340f266186038340df4ea2e6_JaffaCakes118

Files

26170e5b340f266186038340df4ea2e6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9d04e6420b56a48f8a6a4dc5e6b833d9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord593
ord598
ord631
ord525
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord607
ord608
ord717
ProcCallEngine
ord537
ord644
ord570
ord681
ord100
ord616
ord581

Sections

.text
Size: 216KB - Virtual size: 212KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ