44878b1ceb3910b218423dab7eaae748_JaffaCakes118 | Triage

Sharing

General

Target

44878b1ceb3910b218423dab7eaae748_JaffaCakes118
Size

128KB
MD5

44878b1ceb3910b218423dab7eaae748
SHA1

00f762f28a0c95f7cfd2cdd25e12aff3490eddea
SHA256

50fd743d51c51a9b7f11731a304d920072b7d1f4e451933d1b9d2ef36e88c0dd
SHA512

70e398cbc2e0475af735e5fa56982d1bab6ec6ceee19bd2a1b81daccdd0435ff294342ba715e1bcbfb23c46c644f3d35f6c9b1477c5a6b5d706eeea5641c3d40
SSDEEP

3072:3qUVPQ5dN+Ho4xiE6wAFtaQFBNWAT9IJXvbjwmEUv3:JVI9+HohE2aQFBUvbjw8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44878b1ceb3910b218423dab7eaae748_JaffaCakes118

Files

44878b1ceb3910b218423dab7eaae748_JaffaCakes118
.exe windows:4 windows x86 arch:x86

89f22fd816edc3ada7d94b8f8050752b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord517
ord519
ord666
ord593
ord594
ord631
ord709
ord527
DllFunctionCall
ord600
__vbaExceptHandler
ord711
ord608
ord716
ord717
ProcCallEngine
ord644
ord681
ord100
ord616
ord617
ord619
ord580
ord581

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

pepack
Size: 28B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

mm520
Size: 50B - Virtual size: 50B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pe
Size: 22B - Virtual size: 22B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ