6fc07dfe12d5f813a87f922565c07801_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6fc07dfe12d5f813a87f922565c07801_JaffaCakes118
Size

298KB
MD5

6fc07dfe12d5f813a87f922565c07801
SHA1

6cb43c316697c40d9016e7ae311078832a2d86e2
SHA256

9ed266d5cb8332ac22c5f8c10e92c09dfd9a059a283d4b9f7a0f99cf2b6ad329
SHA512

47da68579376ad6c8802dfe3db3be8fdd6e53c72f111b17001d23765f3fc348e811706954aa5dc0e7ce60fb773c094830da469c04033bfa5ac284edcb8ff07a1
SSDEEP

1536:9NdpkjqgoaINj7Xuj0nGbtCGXlAhWMsKxtP:HdpkjqPNj7Xuj0nGbtCkqxtP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6fc07dfe12d5f813a87f922565c07801_JaffaCakes118

Files

6fc07dfe12d5f813a87f922565c07801_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dff7ae388758f90e8b08a97625d8c903

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
ord696
MethCallEngine
EVENT_SINK_Invoke
ord516
ord628
Zombie_GetTypeInfo
ord300
ord595
ord303
ord598
ord599
ord306
ord309
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
ord563
Zombie_GetTypeInfoCount
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord717
ProcCallEngine
ord644
ord537
ord645
ord573
ord100
ord616
ord617
ord650
ord581

Sections

.text
Size: 294KB - Virtual size: 296KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ