5fa78f9f7324e860c8d3a7c541b0e1aa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5fa78f9f7324e860c8d3a7c541b0e1aa_JaffaCakes118
Size

64KB
MD5

5fa78f9f7324e860c8d3a7c541b0e1aa
SHA1

e713c14f7f9475430eca28def2ccc30617a5f23b
SHA256

a450591d7e8779c1e2137379a66dbc1b322c86de10e5801e2cbb46a6db18eb6f
SHA512

d3adebd4b1848cc009f47ff3af611be7f733a5f64c102d4cb2c6aaa14a9e53539a373dd89abcfdf0f5f3d8957e12f3155b56a00545003284b2a1718eb3825ee3
SSDEEP

768:bl6XpZu/W/S5rbLhikm4zwxWsE2yzhks4yzzT1jRiX:blMu/W2likm44A2yzusnFRM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5fa78f9f7324e860c8d3a7c541b0e1aa_JaffaCakes118

Files

5fa78f9f7324e860c8d3a7c541b0e1aa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2f67bada945f49624f14611df0115627

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
ord694
MethCallEngine
EVENT_SINK_Invoke
Zombie_GetTypeInfo
ord592
ord595
ord520
ord709
ord631
ord525
EVENT_SINK_AddRef
ord529
ord561
DllFunctionCall
ord563
Zombie_GetTypeInfoCount
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord607
ord608
ord717
ord319
ProcCallEngine
ord644
ord576
ord685
ord100
ord320
ord321
ord616
ord617
ord619
ord581

Sections

.text
Size: 56KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ