4474a6e5fd9eb04e011e1ef73379219f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4474a6e5fd9eb04e011e1ef73379219f_JaffaCakes118
Size

793KB
MD5

4474a6e5fd9eb04e011e1ef73379219f
SHA1

bddf6810069a8bdf161247feb144eba3bcfa1f9b
SHA256

a47793bdf374ec67921dfb600ce6bd848f2406dee1293453fc133f51defeeca7
SHA512

6b01f69cc2ff1cd3125b184648b7bc6f4a8eeb16b1557dbdcc15db9addcffaf5b660bc99253ed40ce01cef7870f75aba715dd13b35f5bc27c3cd14d30abfedfc
SSDEEP

24576:PgNlLE389HQlYsI+YkmfdqHJ0FqPtsO9d:4NlLE389wlYsI+TmfdqHoTOL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4474a6e5fd9eb04e011e1ef73379219f_JaffaCakes118

Files

4474a6e5fd9eb04e011e1ef73379219f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

27b4d6309525dedde2b398231e6307d3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord631
ord632
ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord713
ord608
ord717
ProcCallEngine
ord644
ord537
ord570
ord681
ord100
ord656

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ