264c6c2db8091906936dc4c673e2eee3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

264c6c2db8091906936dc4c673e2eee3_JaffaCakes118
Size

79KB
MD5

264c6c2db8091906936dc4c673e2eee3
SHA1

b729b901a5cfdae7938647b06221a50013192a1d
SHA256

f467e9b5b054690d399c327083dd7e317a5ae168541f38e6e003a34e151c52ad
SHA512

5e7c43ce6ad1c14089e313b3ec0a0d357e900684048c5377934fbe9edb527b6926690e42dfe189e2e43bdbef811c306aa848c82e4f571810b63dc50e643d7041
SSDEEP

1536:uE6LPwdwhLVP3hJD8vFbppEKmDO1tBEFUQ3VTiMSe+5K:uEwfJDYbrDmCBEFUQ3VTiMTgK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
264c6c2db8091906936dc4c673e2eee3_JaffaCakes118

Files

264c6c2db8091906936dc4c673e2eee3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a397ccc1eae375ad9f434c0b40deee97

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CallWindowProcA

kernel32

GetProcAddress
FreeResource
LoadResource
SizeofResource
LoadLibraryA
FreeLibrary
LockResource
ExitProcess

msvbvm60

ord696
MethCallEngine
ord518
ord520
ord522
ord631
ord524
ord632
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord717
ProcCallEngine
ord537
ord644
ord100
ord617
ord619

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 188KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ