390abee11ecc2016524a17146b5daabc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

390abee11ecc2016524a17146b5daabc_JaffaCakes118
Size

272KB
MD5

390abee11ecc2016524a17146b5daabc
SHA1

dd7d14a55d22b6c33f518b6a26a1b10fc292f32d
SHA256

096c0e90f87d01bd274b8ee7f5ecacbec9b0782b6312d0d7a0a1504ed66b1c4e
SHA512

6bb417b087312db03ed518bc8c00243249eb8f8fb6f5ddb4d4a30c9cd83bfbe662ab450a1f46eae65e32e65cea1df5108f6328c9ca71440e4c6c1bfa0b1acab1
SSDEEP

3072:ADlRpuvUpmA0Gsbp/qoDivGKzgvVb1EkzNBD5anwFDuNW83KdgbXHsjggSAkT1En:ATT1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
390abee11ecc2016524a17146b5daabc_JaffaCakes118

Files

390abee11ecc2016524a17146b5daabc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

85ad5bd4e47f3fbdfe2d5f628c47cc9a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
ord696
MethCallEngine
EVENT_SINK_Invoke
ord516
ord628
ord665
Zombie_GetTypeInfo
ord300
ord595
ord599
ord306
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
Zombie_GetTypeInfoCount
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ProcCallEngine
ord644
ord537
ord645
ord573
ord100
ord616
ord617
ord650

Sections

.text
Size: 264KB - Virtual size: 260KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ