17d1c41e1a4eb5452ccbcbffced7e3b6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17d1c41e1a4eb5452ccbcbffced7e3b6_JaffaCakes118
Size

36KB
MD5

17d1c41e1a4eb5452ccbcbffced7e3b6
SHA1

61dfdf77f99f3f4e294bd47654a18fe97c2ab65a
SHA256

b5660c58b0ae548c0da650bc341461a5fcba845d37c5afb0bd5a47f0ee182910
SHA512

7af5acd665bf86a7ac2e6e1b018fb231cc62bd9c1ae27165f4f4c84d5b84ef4b67694c6db57c20b1c08a41b4b3664ce490dfd97a8ce7cda22147e4ba8b92cb51
SSDEEP

384:Qc2HOo97fkDASlJc5IB1dBx2SGct9JcInp5wyWq2BzSQEt:v2HOefk8NvSGctDL2Sb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17d1c41e1a4eb5452ccbcbffced7e3b6_JaffaCakes118

Files

17d1c41e1a4eb5452ccbcbffced7e3b6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

eb9ab72ab5a1138ce053318c41dfd3a8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
MethCallEngine
ord516
ord660
ord598
ord306
ord307
ord709
ord631
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord716
ord717
ord318
ProcCallEngine
ord644
ord570
ord648
ord685
ord100
ord617
ord619

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ