2512f4fb751919def128d78b08e61278_JaffaCakes118 | Triage

Sharing

General

Target

2512f4fb751919def128d78b08e61278_JaffaCakes118
Size

128KB
MD5

2512f4fb751919def128d78b08e61278
SHA1

58dd94ee7195e29f771b501f6b073d91df164926
SHA256

a83d85633f6adf003c4fbc23372829218ac32e986d33fb3d89f94eb963ce6621
SHA512

cb3d1857f7dec8e698d8e012115dbcc3cccaaabb08347fa4b2825edb1188fec9412887cbd754f56ec28801530ecb52cab2e78159b115ec9d65457b5ee2200a8d
SSDEEP

1536:xm/eRA8q/l8bFfUgFxHiWFzU5wr4XFC8Tto6KclutFof223gVg0L3bEWhq34:sm9qkbLjFI5wr4XFC8ZJotI2uGZW4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2512f4fb751919def128d78b08e61278_JaffaCakes118

Files

2512f4fb751919def128d78b08e61278_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f1b4a1a30bf0ed2dc9c4c9ca7027c1ba

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
ord694
MethCallEngine
EVENT_SINK_Invoke
ord516
Zombie_GetTypeInfo
ord592
ord598
ord631
ord632
EVENT_SINK_AddRef
ord561
DllFunctionCall
ord563
Zombie_GetTypeInfoCount
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord606
ord607
ord608
ord717
ord319
ProcCallEngine
ord535
ord644
ord537
ord576
ord685
ord100
ord320
ord321
ord616
ord617
ord619
ord581

Sections

.text
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ