8d499b44d3c45bdfe98192e38ddc7860_JaffaCakes118 | Triage

Sharing

General

Target

8d499b44d3c45bdfe98192e38ddc7860_JaffaCakes118
Size

1.8MB
MD5

8d499b44d3c45bdfe98192e38ddc7860
SHA1

f35f1ce9d8ef2b6f707569e8a36e746fe0ec666a
SHA256

ad6d7ba121722cce19053e7d8914e0e23cc2cf3c9cdf48cc42a94b8aa4bacab6
SHA512

8f795c65b29d028838b7247034432e0655e558a87f9333aba29817bf830dd5519108ed2963a691a78af9fc8407270308e077dd2b421ffa0ee74e55edd16e7bd4
SSDEEP

12288:XNbNWjjzzYQplycithWKzmWYyYKSoMjad+b:RojUWe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d499b44d3c45bdfe98192e38ddc7860_JaffaCakes118

Files

8d499b44d3c45bdfe98192e38ddc7860_JaffaCakes118
.exe windows:4 windows x86 arch:x86

60ea531dabb726006593672d79feea85

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
MethCallEngine
EVENT_SINK_Invoke
ord629
ord552
ord660
ord661
ord662
ord557
Zombie_GetTypeInfo
ord595
ord598
ord305
ord599
ord520
ord524
ord632
ord526
EVENT_SINK_AddRef
ord560
DllFunctionCall
Zombie_GetTypeInfoCount
EVENT_SINK_Release
ord600
ord601
ord311
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord313
ord712
ord607
ord608
ord716
ord717
ord319
ord534
ProcCallEngine
ord535
ord537
ord681
ord685
ord100
ord610
ord320
ord612
ord321
ord613
ord617
ord619
ord581

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ