1260b33fdaeb88509fdf851420a09b8f_JaffaCakes118 | Triage

Sharing

General

Target

1260b33fdaeb88509fdf851420a09b8f_JaffaCakes118
Size

20KB
MD5

1260b33fdaeb88509fdf851420a09b8f
SHA1

357266790265b873fbc8a7d619d40e672edfc83d
SHA256

734e815b467bcd8b781630aa38b86d5a205d0916c6bd88230ae5982de9c15715
SHA512

fef662de242ab27eb61f7ef4a2a44dbde57a0fbbbe79d59307469a03515bf92c4f3ee74dd6e3feef50b0557c4690acbbebe744d0767bb7e5e2b83a10bcb5ce76
SSDEEP

192:GQ94cxlPJfBwhneSZUM0M/R7HlkN74HuO7VAb6HI:ndBoZUM0M5hkcwboI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1260b33fdaeb88509fdf851420a09b8f_JaffaCakes118

Files

1260b33fdaeb88509fdf851420a09b8f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

58c4efb6c2cc473d23f6444b73c28fa2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord520
ord631
ord88
ord0
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord606
ord717
ProcCallEngine
ord644
ord537
ord572
ord100
ord616
ord617
ord619
ord581

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ