44a6113fa59de6be2344e60a94273e6b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44a6113fa59de6be2344e60a94273e6b_JaffaCakes118
Size

164KB
MD5

44a6113fa59de6be2344e60a94273e6b
SHA1

056925bc4a5580f6795cd4367a7fd7163ee89bd0
SHA256

b9a16ec91c743f4baf87c1deb8883a1c7eb70420b62e5600fddd8eacafd12b47
SHA512

c8dd037bf2f0aac76c4f6bf6b19e3739ed4d612fba15953f64325ec9dae897847311c5de17b0e914f5de36d88bf1d63158c5e7691874217641ab287ddf61eeea
SSDEEP

3072:K4emMtyk4+BobeZMGjIKmyvsn5DlZGAkfJdRnn9PFLelgO5tb6TPeffbvFdil4K5:K4emAqj6rytGMr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44a6113fa59de6be2344e60a94273e6b_JaffaCakes118

Files

44a6113fa59de6be2344e60a94273e6b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fb6a6c0dc7629d09448ed24649b9ef07

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord593
ord594
ord598
ord631
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord670
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord607
ord608
ord717
ProcCallEngine
ord644
ord570
ord648
ord573
ord681
ord685
ord578
ord100
ord616
ord618

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 104KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ