17c269b3d46c38a73893cc7ca18e0c52_JaffaCakes118 | Triage

Sharing

General

Target

17c269b3d46c38a73893cc7ca18e0c52_JaffaCakes118
Size

272KB
MD5

17c269b3d46c38a73893cc7ca18e0c52
SHA1

6ab8debe073583d4c39c0b7cba437966247c6856
SHA256

8c89ed7d7d4716d0956134b61c9d3573c43f6d348b7b6e577198efa9476fd74d
SHA512

90a51b0b0bceaa84a20bcd9d5a317f8e91409869fc90b6f852caf3ba6672d47a7aafcacd87572c68430dafba4f786b41305871bb313c66d98064094234da4fb9
SSDEEP

384:AuW8O5Uky8fAZuWZGB1Es4HaY6W5C+zhL+TlKxZCqzu3MJu0qjjpX53Y/+EnOriu:tW8BGfOvU8nS5KTDiD910K1GV1E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17c269b3d46c38a73893cc7ca18e0c52_JaffaCakes118

Files

17c269b3d46c38a73893cc7ca18e0c52_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8af501df7efc2046d59121b5e300e650

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord665
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord537
ord100
ord616
ord581

Sections

.text
Size: 264KB - Virtual size: 262KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ