1bc32a514ca01fd50dd55d860b0338e9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1bc32a514ca01fd50dd55d860b0338e9_JaffaCakes118
Size

24KB
MD5

1bc32a514ca01fd50dd55d860b0338e9
SHA1

1efbf8ca74039a07359a94b100c54d0ca158fe3b
SHA256

798de7f0d3fc0dba9821de61d16729067744d0d3e4696959705ab94629b3907d
SHA512

befa3cca088f5232f59035e7db15b926a4b0577184bcfaefba9b8743dc1c59f8a1042ad0143990b7956b8d6898fa6f2069742e6525a6266ed79e57c08ad4e646
SSDEEP

192:x+p7sHRat/RatNTzBRx5BGeAHLwPZUmVcL+9n4xTii5mgE5:x+sHkgL/BZOZmV1ITB5mgE5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1bc32a514ca01fd50dd55d860b0338e9_JaffaCakes118

Files

1bc32a514ca01fd50dd55d860b0338e9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6e4e23d2e9af65501520108cc6d4367f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
MethCallEngine
EVENT_SINK_Invoke
ord516
ord666
Zombie_GetTypeInfo
ord595
ord598
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
Zombie_GetTypeInfoCount
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ord716
ord537
ord644
ord573
ord100
ord618

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ