441915eeaee051cd76aa9164f7da3b8a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

441915eeaee051cd76aa9164f7da3b8a_JaffaCakes118
Size

69KB
MD5

441915eeaee051cd76aa9164f7da3b8a
SHA1

8bc6aa6ee4478f2d128d8a91d9065e67d4720b26
SHA256

4dbb385bb56949e5728bb4cf1be5ab94f73295a023575a39097cb6ae43c585e4
SHA512

c1c7fcd9a658781971a2bbd1e6029b560fee075238a878e187116facf4bd9b9763779b5040ba2af72d17bfe065de311615efa84482ce8c80670327b3b8217817
SSDEEP

768:MtYkDJKF4x35HEbda1f9n3mipGmlK2NGV6JsdnGyBHs8YOJ0ZDsTz6NGikGz9avp:6EFbdcf9Xp7lcVTdGZ/OcDqz5ikG4s7k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
441915eeaee051cd76aa9164f7da3b8a_JaffaCakes118

Files

441915eeaee051cd76aa9164f7da3b8a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

36fbf8489e4639c43b8ca9146581ed87

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord100

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ