60259d16e2a63edda80bff3e6298b24c_JaffaCakes118 | Triage

Sharing

General

Target

60259d16e2a63edda80bff3e6298b24c_JaffaCakes118
Size

160KB
MD5

60259d16e2a63edda80bff3e6298b24c
SHA1

92bedcf78d529aa27c9b888a346e1bd9ceeb470f
SHA256

c62b0dd2d3b28a0dc088150893c880b3a667b86a95af46fb151efaaabcb4c788
SHA512

a5364a02d0c391c38c84321731bc82a200c541c09322d67aa0b809428996d860cc7a8b742d8c87ec18b2fe671e8e78e2af87b2ad7c146a0efe2226e3e4fff71c
SSDEEP

1536:y68InHduvqLuNZwdNg88rzqyumKStUC3FPDZBza0l47GlRf6B6yG3iEoWTb4cQHc:y68IHduvRNKLQrzq/8ztk3cyG3d78I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60259d16e2a63edda80bff3e6298b24c_JaffaCakes118

Files

60259d16e2a63edda80bff3e6298b24c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

41a7f7b5270f08abbfd6d60d3877d535

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord667
ord593
ord594
ord595
ord598
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord717
ProcCallEngine
ord535
ord644
ord537
ord645
ord648
ord570
ord681
ord576
ord578
ord685
ord100
ord579
ord616
ord618

Sections

.text
Size: 148KB - Virtual size: 146KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ