17412a250fa1f3d8c87664f6a2afd5bb_JaffaCakes118 | Triage

Sharing

General

Target

17412a250fa1f3d8c87664f6a2afd5bb_JaffaCakes118
Size

80KB
MD5

17412a250fa1f3d8c87664f6a2afd5bb
SHA1

a894a6a26323cd73c0e5dabfcbb54cc623d3afed
SHA256

982f80649a336839863a00684eb76efe5ace93174e60fdda299a454a1e990ad0
SHA512

1a9084d870995ad4b771a35fd721e6863c31363684ca99858830d0bd9c5efaf97be0571d73573d5dbb680dc988505299230154dd809a2d2bc9af01c4a857c30a
SSDEEP

1536:SoMnMsSV7etxWU+Ou9XH/RD0PpTkUMs0MW:SoMnMdVStxWU+Ou9XH/RD0PxkUMTMW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17412a250fa1f3d8c87664f6a2afd5bb_JaffaCakes118

Files

17412a250fa1f3d8c87664f6a2afd5bb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e6ee0b9ce08ab974a996c8d039eaefa6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord100
ord612

Sections

.text
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ