173a9b8cd76d138d56af10ad5ec52a7d_JaffaCakes118 | Triage

Sharing

General

Target

173a9b8cd76d138d56af10ad5ec52a7d_JaffaCakes118
Size

200KB
MD5

173a9b8cd76d138d56af10ad5ec52a7d
SHA1

e2f6a4653789157ecb4f451f97fad89dc8932d36
SHA256

024ce0d9b02535b04ff93baf11c958e6dafb460464b0cd5d28864090d1a2ed5d
SHA512

7ee1063a1f0d62713516e188ebddef0bc949a6677a88e8246169e93b0fbd5309926d10aff72314529b0a8fd71d534cd78c1cf7f22888b39ae46cb2aec00f8c76
SSDEEP

3072:RPeNC9Tstk/J3B1sZbxdaLCoDMT3ga/e1VK:ReNaTstk/JN2oDM7gG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
173a9b8cd76d138d56af10ad5ec52a7d_JaffaCakes118

Files

173a9b8cd76d138d56af10ad5ec52a7d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d6826be2d7d23aaf854edb5b56bbdb74

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
ord696
MethCallEngine
ord518
ord593
ord594
ord598
ord520
ord631
EVENT_SINK_AddRef
ord528
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord714
ord608
ord717
ProcCallEngine
ord644
ord645
ord570
ord100
ord431
ord616
ord617

Sections

.text
Size: 188KB - Virtual size: 186KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ