259a954b39cd23acfd9f6e669294ed33_JaffaCakes118 | Triage

Sharing

General

Target

259a954b39cd23acfd9f6e669294ed33_JaffaCakes118
Size

56KB
MD5

259a954b39cd23acfd9f6e669294ed33
SHA1

6f8a02c1788c810fc0e9eba450c2c91c4207d1d3
SHA256

3bd1c3af34eed4321d6cd7401e40469ee1ffa79a9021a70688ce3573a3d8a5b7
SHA512

ce97ce6687fead2602513f7378fcc41c565a4eb0d4862f60237db258a321edbd32532ee0aba60e1d02f1972b59c88b6f7d28eee9ea64e19d5309060678e9ba90
SSDEEP

768:XcXICzZ3Mr49kT/JoodJ4P11AuQpb7JZI7i9Y/09jKA0ix9+:XosckTTj4LQpvJC7ULxxk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
259a954b39cd23acfd9f6e669294ed33_JaffaCakes118

Files

259a954b39cd23acfd9f6e669294ed33_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1990e34d02baebfa008f16440a6ff63a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord631
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord607
ord608
ord717
ProcCallEngine
ord644
ord570
ord573
ord100
ord616
ord618
ord581

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.FD
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ