65162589b50de10e7c60820eefd0e185_JaffaCakes118 | Triage

Sharing

General

Target

65162589b50de10e7c60820eefd0e185_JaffaCakes118
Size

184KB
MD5

65162589b50de10e7c60820eefd0e185
SHA1

94d92135b3e16596a1ff47e032602b6a4783e820
SHA256

c47500e456a0dd0e4571d45a8bf42acc4d95d8fec023a363a5253bbd304e3b70
SHA512

7e9fbbe7b742ef53e24646c084a9a73977210edff0d21d234a22ac82332901fd98f0959ec4658a076a9db1e3d029e1eb0b1010bfcdf29ba9435ad1eeedda0276
SSDEEP

3072:r3Y2Hmcok7ZSBYfkVoFdRrqo0aRaA/HF673+UWHIfrXHhd:rfHtNkVsuaRaU6mHG3h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
65162589b50de10e7c60820eefd0e185_JaffaCakes118

Files

65162589b50de10e7c60820eefd0e185_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f0a23f275eda5615d5d2e5523406a280

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
MethCallEngine
EVENT_SINK_Invoke
ord516
ord517
ord518
ord666
Zombie_GetTypeInfo
ord593
ord300
ord594
ord595
ord303
ord598
ord306
ord520
ord309
ord709
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
ord527
ord529
DllFunctionCall
Zombie_GetTypeInfoCount
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord713
ord607
ord608
ord319
ProcCallEngine
ord644
ord645
ord570
ord648
ord573
ord576
ord685
ord100
ord320
ord321
ord616
ord617
ord618
ord619
ord581

Sections

.text
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 128KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ