4429351b05e64a8144f44396b6dc5f0b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4429351b05e64a8144f44396b6dc5f0b_JaffaCakes118
Size

24KB
MD5

4429351b05e64a8144f44396b6dc5f0b
SHA1

8b946f3fc687d8b8aef3bf5ca2747dd8006f32bf
SHA256

1e5bed6619c029c32cc8884e5d93b707341c4873b67d17e85ac2e713504accbd
SHA512

f87515e0f466a46085ab4a12ede3e48ae2945bd83e326e9bb83e58f15f56adeb2732ee233e929057a592f8b98fa0a6acaea6ce53f9916f2577a75c825393d145
SSDEEP

384:57us4AIuiO4cO4/O9BqBoBVB2BLBCBf8zQ4+u2qpOHT9gseyyWHcu3UTd:Nn4AIuiO4cO4/OMQ471pOHT9gseyDHcp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4429351b05e64a8144f44396b6dc5f0b_JaffaCakes118

Files

4429351b05e64a8144f44396b6dc5f0b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fded1164022fea73e897f25cfb15a817

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord631
ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord713
ord717
ProcCallEngine
ord644
ord537
ord578
ord100
ord616
ord581

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 964B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ