26f169a501e714d5c58f8a73feba7cac_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26f169a501e714d5c58f8a73feba7cac_JaffaCakes118
Size

36KB
MD5

26f169a501e714d5c58f8a73feba7cac
SHA1

fc44830f8f4c1af090464ac51cf7e4553d4b09a1
SHA256

a42ab0f3454434eb940b873e5efd25814ded5fd25e6fe2c2aab51aba80d60300
SHA512

8bcb88cb303a97d13841a4cb18e26f6596805d850be12b6d4ca66cb7b245cafca22def0c0d35d4e54ecc2997d47c5568f08876efa762c17dd3acdca26c95587c
SSDEEP

384:xpXNfzq7FBnNUqTae9ezhrokeAMWdz71Da5kUBV:x5NfzQUwsHUXV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26f169a501e714d5c58f8a73feba7cac_JaffaCakes118

Files

26f169a501e714d5c58f8a73feba7cac_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7abc2d0a4c13949ed0311eac37a6cdba

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord621
ord516
ord518
ord666
ord631
ord632
ord529
DllFunctionCall
ord600
ord601
__vbaExceptHandler
ord711
ord712
ord608
ord716
ProcCallEngine
ord537
ord570
ord648
ord578
ord100

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ