36697b1e5d1bc64c5dbc4fcfa7f4ef46_JaffaCakes118 | Triage

Sharing

General

Target

36697b1e5d1bc64c5dbc4fcfa7f4ef46_JaffaCakes118
Size

88KB
MD5

36697b1e5d1bc64c5dbc4fcfa7f4ef46
SHA1

f99789e8bb56c9bd9e75f67df1b19021e3021235
SHA256

f57db4aa4cb5c762780e95d21df618f6350233a93d3bf9cf698acfd51bdefab5
SHA512

6e4dfcc685a6b0c45e7761c5a5f2877ee8a7eb41851c4643f76b0bedf98bd97cc6ef88c9d09e0dfa299da987b4146a6f28b999e97248e0d9cf073276a1c73606
SSDEEP

768:PW4wnebidH4vu0XXLDPinBXi3dX5hl+YW2otlAG8/W6vdlRss8QF6ynNDmwFwGoA:BbDm0XXHanBXi3dX5hMEot2H1fbF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36697b1e5d1bc64c5dbc4fcfa7f4ef46_JaffaCakes118

Files

36697b1e5d1bc64c5dbc4fcfa7f4ef46_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a57718f61b7c1c1013c26d0e16de3701

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
MethCallEngine
EVENT_SINK_Invoke
ord516
Zombie_GetTypeInfo
ord593
ord595
ord303
ord598
ord520
ord309
ord631
ord632
ord525
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
ord566
Zombie_GetTypeInfoCount
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord531
ord716
ord717
ord319
ProcCallEngine
ord537
ord645
ord570
ord648
ord573
ord685
ord100
ord579
ord320
ord612
ord321
ord616
ord617
ord618
ord652
ord580

Sections

.text
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ