3249b09d05a5171c81b31fcdfe19f4aa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3249b09d05a5171c81b31fcdfe19f4aa_JaffaCakes118
Size

44KB
MD5

3249b09d05a5171c81b31fcdfe19f4aa
SHA1

1cf954d6a75385f02c535afc7010bb807612779d
SHA256

c7212d4cdff6b91692b364e138fd09b991e82d62b845d2fc938e2f427df91a44
SHA512

6850217788fd1c3fa99c88e27adf790a5e99b8c7a920355c8e5a3de928654d47640f519c21f9f75f9d158fad6221ed0bc9c9b041a52ec537cb9a2bc8be7b2dc6
SSDEEP

384:UKW8qWAqkCayKi6QYj0jAvQH3jPS+KEmzUCBAQEgPU/jlv94Gp6sQzbvj0zrACv9:EWxXM+jPS+KZUzQEaEjlv9Gzbvj0zr9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3249b09d05a5171c81b31fcdfe19f4aa_JaffaCakes118

Files

3249b09d05a5171c81b31fcdfe19f4aa_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

e7b0f1ca9512c70cbd8ca9dad55c8946

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
MethCallEngine
EVENT_SINK_Invoke
Zombie_GetTypeInfo
EVENT_SINK2_Release
ord592
ord520
ord523
ord525
EVENT_SINK_AddRef
DllFunctionCall
Zombie_GetTypeInfoCount
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord607
ord319
ProcCallEngine
ord537
ord644
ord645
ord648
ord571
ord573
EVENT_SINK2_AddRef
ord101
ord102
ord103
ord104
ord105
ord320
ord321
ord616
ord617

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ