32f4c1f9e85976b16af679e6478a457c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

32f4c1f9e85976b16af679e6478a457c_JaffaCakes118
Size

106KB
MD5

32f4c1f9e85976b16af679e6478a457c
SHA1

2fb16523df4aba4e9451ed437d8b5143ba4629c0
SHA256

9e702719330368153aadc98b43ce5a5165b49e9421be34861d246b92fa80460b
SHA512

a6da462aa00e78a234437461d74de9cdb3074a12cf180bc4780fa975b03cbb671c589d18630f0fa9b4f5f01b783edeb76883a10ddf58e00458b57e64830b9a80
SSDEEP

1536:P8PFQRh/vneN/odzkEhc7ewY8MXvwFce0FT98n278i9HZ2HT2KswKm0+lS2IOQ8F:EPFSh/vneNARvcQYhdsKet8jVfIUGE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
32f4c1f9e85976b16af679e6478a457c_JaffaCakes118

Files

32f4c1f9e85976b16af679e6478a457c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

92a0eac470a7d6de2be7294659c0b8d9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
MethCallEngine
EVENT_SINK_Invoke
ord516
Zombie_GetTypeInfo
ord595
ord303
ord309
ord709
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
Zombie_GetTypeInfoCount
EVENT_SINK_Release
ord600
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord608
ord717
ProcCallEngine
ord644
ord645
ord570
ord573
ord100
ord616
ord617
ord650

Sections

.text
Size: 55KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE