f22bed66970bb4306d4e638cf707a8f8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f22bed66970bb4306d4e638cf707a8f8_JaffaCakes118
Size

128KB
MD5

f22bed66970bb4306d4e638cf707a8f8
SHA1

01527e3544a60b41b7b056917e064cc01cf85682
SHA256

46888e56c775bab1b142dfce6a85e0ff9481e1c877eafee23125c16b8e3b8453
SHA512

e1ac9dcabedbf6bc002a8c6bdb90825e50e8346a8cec3f72e891b422203c2f6a66f14754a5307ebec02e45e73559786c8c32bcb131e735752ede141f2c69348d
SSDEEP

1536:sRDgTH56T7CRZQXl+mgny88dXFK/guVzZ8MsI:ss56T+RZNmgn585FKbVz2MZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f22bed66970bb4306d4e638cf707a8f8_JaffaCakes118

Files

f22bed66970bb4306d4e638cf707a8f8_JaffaCakes118
.exe .vbs windows:4 windows x86 arch:x86 polyglot

b3f425a912f10cb38d5b9054c3bce960

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
ord694
MethCallEngine
EVENT_SINK_Invoke
ord516
ord518
ord519
Zombie_GetTypeInfo
ord592
ord593
ord300
ord594
ord595
ord303
ord304
ord598
ord599
ord306
ord520
ord309
ord709
ord631
ord632
EVENT_SINK_AddRef
ord528
ord529
ord561
DllFunctionCall
ord563
Zombie_GetTypeInfoCount
EVENT_SINK_Release
ord600
ord310
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord312
ord711
ord712
ord606
ord607
ord608
ord717
ord319
ProcCallEngine
ord644
ord537
ord576
ord685
ord100
ord320
ord321
ord616
ord617
ord619
ord581

Sections

.text
Size: 120KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ