17891736f8251d8c256bc960cac24514_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17891736f8251d8c256bc960cac24514_JaffaCakes118
Size

68KB
MD5

17891736f8251d8c256bc960cac24514
SHA1

f51697909e088295f0bbb40d9bea6bd121cca10a
SHA256

a2302fdfe4d93fd0912d00d766318f817e81a81c0dea767b19e31367121d5b3c
SHA512

aaf6b48cbed342f0cfd86c3979094d5e0fe6c7bd4f96fd1501894f192951ac672bed2b82fa79565ab0882bdc99be0bcc141d9736c451ae1c6cd9780b8a046bf6
SSDEEP

1536:wcSL+ewbOYdKivxdq9CY/C/pWFCnTrlf:xzXLpWFQlf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17891736f8251d8c256bc960cac24514_JaffaCakes118

Files

17891736f8251d8c256bc960cac24514_JaffaCakes118
.exe windows:4 windows x86 arch:x86

35790ae3444c93b9c33af059ad9aaac0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord100

Sections

.text
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ