37c4fe0b6e0e4437e46635e2cb3842ec_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37c4fe0b6e0e4437e46635e2cb3842ec_JaffaCakes118
Size

84KB
MD5

37c4fe0b6e0e4437e46635e2cb3842ec
SHA1

8953583463e93f688caf5cfab713d92a2584be77
SHA256

bd3dc85306b1a84422923a96d930be3c934464f041ef7d2ea2f45ac13482abe8
SHA512

78f9c5ee643aec091c75b6b25ffbbf3f4b2df55ee218b29944838280b74442365591f5b281dd04bf9457d0e010ae7b4bf37927e2c3f5eca5a51324210eb4fbe6
SSDEEP

1536:lkSI1uqCOOOzm2j8fEFH2OPs9OOOUqieSI:SLmOOOi23P2OOOHL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37c4fe0b6e0e4437e46635e2cb3842ec_JaffaCakes118

Files

37c4fe0b6e0e4437e46635e2cb3842ec_JaffaCakes118
.exe windows:4 windows x86 arch:x86

10a54d6bb334c87feadce6ba248f0584

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
MethCallEngine
EVENT_SINK_Invoke
Zombie_GetTypeInfo
EVENT_SINK2_Release
ord595
ord597
ord598
ord599
ord709
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
Zombie_GetTypeInfoCount
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ord716
ord319
ProcCallEngine
ord644
ord645
EVENT_SINK2_AddRef
ord100
ord320
ord321
ord616
ord617
ord618

Sections

.text
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ