44919a49009d3aed535f784eafef5daf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44919a49009d3aed535f784eafef5daf_JaffaCakes118
Size

36KB
MD5

44919a49009d3aed535f784eafef5daf
SHA1

d829fcc44943d7b47128543bb17e534377a78def
SHA256

fdeef1cf099ca48f3be4143fd83817890c6fbbcd15aff8c1829425833d33241d
SHA512

fb6b055d2b7361172f7aeb1612b2190d7f2a84e05dac14c6338f10834a2d641701dcf8b19d78d64cc320423e8f9a0ba3b116c98d8cbee9f37138e39785e59534
SSDEEP

768:z5WINBqZSjDzs7e3KR3mU5ybCwAd/N/h0mlHwEkK9v0:z5LqSvz9G3jnZ0F40

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44919a49009d3aed535f784eafef5daf_JaffaCakes118

Files

44919a49009d3aed535f784eafef5daf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

165b9e90d34c82476d0755857012b239

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord518
ord593
ord595
ord598
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord717
ProcCallEngine
ord537
ord644
ord570
ord685
ord100
ord616
ord581

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ