17fe39e433a4bd00c8d03c0800bcc147_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17fe39e433a4bd00c8d03c0800bcc147_JaffaCakes118
Size

103KB
MD5

17fe39e433a4bd00c8d03c0800bcc147
SHA1

78d5a7b40f02a944f5dd1e9262ef1b697343be2a
SHA256

12f5c30693b06f0eb1100ce7ca4f952c399f5b66b1192813d192ed1098a05f91
SHA512

869316589130d71181475cdd74c61b97376d39f522db79ec86f7ee217cc2ec861dbe0a9c185f9a5c428bf3164b3575dc4e4715502787778ba9b5c3c4ee966d35
SSDEEP

1536:Qv0Zn9x/6JFkTyB8y9Ty/frfrqut3cQV34XXx9ahVr/k2MSamNF5Ar0dLckSUUb:ym9Aou9orfrhoarMme0dBSUO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17fe39e433a4bd00c8d03c0800bcc147_JaffaCakes118

Files

17fe39e433a4bd00c8d03c0800bcc147_JaffaCakes118
.exe windows:4 windows x86 arch:x86

47d3e89fedd03caf8015c1e52370d748

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord518
ord519
ord553
ord660
ord598
ord632
ord525
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord563
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord608
ord717
ProcCallEngine
ord535
ord537
ord644
ord570
ord648
ord578
ord100
ord610
ord616
ord617
ord619
ord542
ord545
ord548
ord581

Sections

.data
Size: 190KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ