2d539b59efcfdd13224099ea79249e5b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d539b59efcfdd13224099ea79249e5b_JaffaCakes118
Size

768KB
MD5

2d539b59efcfdd13224099ea79249e5b
SHA1

5f249cefa2583d07ab46692191970981ee2f4f4c
SHA256

b56ec43829e88757bcccd855eab7203d1e00c8433096e5be82329b20f74e64b5
SHA512

23ba23dc00a67e73f00dc4f0ae1837c10d5fcf3e778e09ec86387491defe4c3c914a40c8d10db34588e676052311ebce2e825e5a7a182d90e22d05a04de0a80c
SSDEEP

12288:eIj8jj+OGnFLCjOmeREJqj5rn6JfXCjUafpVeDQyUXfW+u/oS:G3+OLjOm8EJarnjjUafpVMUXfnu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d539b59efcfdd13224099ea79249e5b_JaffaCakes118

Files

2d539b59efcfdd13224099ea79249e5b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a9d499c3ae907032fe19d17c46c86559

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
ord588
MethCallEngine
EVENT_SINK_Invoke
ord516
ord517
ord519
ord666
Zombie_GetTypeInfo
ord595
ord596
ord598
ord599
ord709
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
ord561
DllFunctionCall
Zombie_GetTypeInfoCount
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord714
ord608
ord716
ord717
ord319
ProcCallEngine
ord537
ord644
ord570
ord573
ord681
ord685
ord578
ord100
ord320
ord321
ord616
ord617
ord618
ord619
ord581

Sections

.text
Size: 316KB - Virtual size: 315KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 448KB - Virtual size: 446KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ