44705e51052bf90d821174b00023eb9f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44705e51052bf90d821174b00023eb9f_JaffaCakes118
Size

98KB
MD5

44705e51052bf90d821174b00023eb9f
SHA1

32a54eb97a04eb6072ca1f1bd956fffc40066574
SHA256

c06752c930ab7e3724ddf865473f2f37fea0a09bd23d44f2654c8b35c733801b
SHA512

d30a7233cdbb390721fbedfb73233c79a97651dcf469f4b050cb683c23519521b17d1d58ee8abd1755cd0caca8d7cb897f7a1a8983f1afbad3e0489d400e9e81
SSDEEP

1536:NoxerlJ+rVZaTaYwJ+Qh3Howodg+YlM3blKwrCJ7yFEM8DjWcI7P27hGw2O:s6GvcowQa++n3bfrguij7IC8w2O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44705e51052bf90d821174b00023eb9f_JaffaCakes118

Files

44705e51052bf90d821174b00023eb9f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

227355e08d9eaa8e2f071033223657ac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord632
ord525
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord570
ord681
ord100
ord616

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ