450552b0e48f7d1684c281388b6bd077_JaffaCakes118 | Triage

Sharing

General

Target

450552b0e48f7d1684c281388b6bd077_JaffaCakes118
Size

100KB
MD5

450552b0e48f7d1684c281388b6bd077
SHA1

a7fc98557d09091087f47f9cf631b650d0fedc72
SHA256

4adcee5d47f16904a54cf3cd4df906365d1eac606437cce45013961360561c35
SHA512

6890c61f52f3ffdaeb2803da3adcbfabe3655f70e63e574e6b10b7a8b4bdfde1998d12b91f593b8a89a0b9ba9812fbdd10f7894d19d39c547b607ebae93f8678
SSDEEP

768:+ifitZIQWsKFFWlwFtchS+YEAn83EAsLYqi++olvxl5RmiH:SZIQW1Aw2S+tNAYqi++IzZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
450552b0e48f7d1684c281388b6bd077_JaffaCakes118

Files

450552b0e48f7d1684c281388b6bd077_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1db026006282d29711c1c4ab8b707bd2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord595
ord525
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord717
ord534
ProcCallEngine
ord537
ord570
ord573
ord685
ord100
ord616
ord650

Sections

.text
Size: 80KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ