26c0bb56fd805a1aa61c98ff128d4902_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26c0bb56fd805a1aa61c98ff128d4902_JaffaCakes118
Size

184KB
MD5

26c0bb56fd805a1aa61c98ff128d4902
SHA1

5fc0f1a17f00adb70dd572cbc08db45745859405
SHA256

bfef35af2be34552aaaadd9d5adeb1e4ab0c133265185cf59f1716bbc3e9fa04
SHA512

dfbbe81fd83c3aa5d36fdffe09ebc262c6cbfc6d0268298f7192debffdce8ae3a345759dbf218bd150ad5fdbae372b659f31b10f0a8a070d262823f1512e3d6e
SSDEEP

3072:jcSzspDOsH2ctmOy0fA7i4/Y7pl4+MeGsbbZyqwSB7azU8:jYag2c8wfsiAE4td2bZyqdB+I8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26c0bb56fd805a1aa61c98ff128d4902_JaffaCakes118

Files

26c0bb56fd805a1aa61c98ff128d4902_JaffaCakes118
.exe windows:4 windows x86 arch:x86

165b9e90d34c82476d0755857012b239

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord518
ord593
ord595
ord598
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord717
ProcCallEngine
ord537
ord644
ord570
ord685
ord100
ord616
ord581

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mmmm
Size: 4KB - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ