cf26c35148adc12596864ca840c300d2_JaffaCakes118 | Triage

Sharing

General

Target

cf26c35148adc12596864ca840c300d2_JaffaCakes118
Size

24KB
MD5

cf26c35148adc12596864ca840c300d2
SHA1

5fbb8f16d02c1c132f9a58ba161dfa317eecb10e
SHA256

58bc3a2a5b0e5330a2b23c11a7de4bb8ccc286d62c6152b28cc2fa01a8831a62
SHA512

ca6b282a407c6468c148cee3d70264e9a2912b40c7050ccd504ad8da83ad68f098eaf6c9d54083859ed781ab98061a8cf069d43ff7683c9389c489a2281453d7
SSDEEP

384:JXtPWTQyf6fwZJKC3+BOh6jjjjmwrr09NuNyMve:JXUiwfVijv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf26c35148adc12596864ca840c300d2_JaffaCakes118

Files

cf26c35148adc12596864ca840c300d2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2983227b22f0cb35919162748e6efd25

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord626
ord666
ord595
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord644
ord570
ord648
ord100
ord616

Sections

.....
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.....
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.....
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ