44d2b6c513b2058eae42ea998433a738_JaffaCakes118 | Triage

Sharing

General

Target

44d2b6c513b2058eae42ea998433a738_JaffaCakes118
Size

44KB
MD5

44d2b6c513b2058eae42ea998433a738
SHA1

e9133ada4b1fb73a836cc762ca0efd60b82f61c1
SHA256

719d0cdbab42b5b95dfc01f8c18432df38a64a1ace77a1785375b7be8a12a4f8
SHA512

2e51117cd7c00fe03635e2bd799fa06c77ca12ba8776d8472455cd91b8019106d6259cf4b554b845143b6a3785eff0dd0fa103fedf1a105b4023d64f5d9c0d4c
SSDEEP

768:w0be1Ch2Ddg6hr+XtthGLKgi9mEUhvGNfd3O+6LIxNkf0be:w0C1VDG6h6ttuttSVkf0C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44d2b6c513b2058eae42ea998433a738_JaffaCakes118

Files

44d2b6c513b2058eae42ea998433a738_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b3f56317a21c7209d6e6c16c4a567c3d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord558
ord598
ord709
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord607
ord608
ProcCallEngine
ord535
ord537
ord576
ord100
ord616
ord617
ord619
ord581

Sections

.text
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ