744ee5c4a159dcda0baaee70cdd90ee5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

744ee5c4a159dcda0baaee70cdd90ee5_JaffaCakes118
Size

73KB
MD5

744ee5c4a159dcda0baaee70cdd90ee5
SHA1

a1437317756f5e1b93a6dbd2fe10fb824dcd2101
SHA256

4767f471bb3ee8620ed0207fc5464a71b525b6f67942df5bb542c171b4b33399
SHA512

e910827b4e42d43e2632e60f2208416ade2c070240ed47bff024ec19fa14f2ee25cde9ee01a333e7cd88092f766972855c397e3b7fb8a10d7cfdba1ed5416086
SSDEEP

1536:Ivgw6sRvCuZfqxtiiYsMs7VmpdI9l6gz2Fb64Y:6XcuRq6iWEVmk36gAS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
744ee5c4a159dcda0baaee70cdd90ee5_JaffaCakes118

Files

744ee5c4a159dcda0baaee70cdd90ee5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bbe794f47035a39631e4d80d8479ec26

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord666
ord667
DllFunctionCall
ord600
__vbaExceptHandler
ord711
ord607
ProcCallEngine
ord570
ord697
ord100

Sections

.text
Size: 16.1MB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 844B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ