326e6be060e6e32d90ce1c569bd6a55f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

326e6be060e6e32d90ce1c569bd6a55f_JaffaCakes118
Size

96KB
MD5

326e6be060e6e32d90ce1c569bd6a55f
SHA1

adb1e0943d66c4f9f3489a4040fe354e91270374
SHA256

cfc5c8b7ee7fd3eabd95ae9df045ae0173b48aae14ef4836b7c87800f9e5858d
SHA512

d1afeb87d4901f15fb8b6bc5422d1f096852501c6c150c0e97fd79c8137b81a90a3757f0047ec5acf5f2a8fcfbd1585982abc1a44207832576a82de1f96a7f8b
SSDEEP

1536:KCB1XJf5RDHhE2Gnm+2nj5a4XmR5mRgMpT0fuNI3slw/NWTk8efpwPmIkD06Wswi:KCBr5RDLlnj5a4mMpT0fuNI3slw/NWTI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
326e6be060e6e32d90ce1c569bd6a55f_JaffaCakes118

Files

326e6be060e6e32d90ce1c569bd6a55f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

75a80245f249df19ce9a7642a2538846

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord517
ord660
ord595
ord525
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord100
ord612
ord616
ord617
ord546

Sections

.text
Size: 88KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ