76718f0fbbead2f306169f2a6269e2de_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

76718f0fbbead2f306169f2a6269e2de_JaffaCakes118
Size

128KB
MD5

76718f0fbbead2f306169f2a6269e2de
SHA1

191073baf388b811a67105e5edd067eb3c999f6c
SHA256

bf8dc144061d933d44b9bb5fcd39539d622ae6792943c274479439203a1e2e0d
SHA512

ec0a4f27503d1be6da1a1eb48cd78adb952d5fa1f8c52117aa74b3a084167e9862d1fe7f80e332269a8dfc37999b34832b19a26451387fb90d9d054a4e3a42ea
SSDEEP

3072:qep0rFCuc07RXCm/8/m0lIAacjmC4ACug0rzN:8RPXCm/8/m0lIAxjmCvZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
76718f0fbbead2f306169f2a6269e2de_JaffaCakes118

Files

76718f0fbbead2f306169f2a6269e2de_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1bc14827006a9d8c45885d29de82ddab

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
MethCallEngine
EVENT_SINK_Invoke
ord516
ord519
Zombie_GetTypeInfo
ord592
ord593
ord594
ord595
ord598
ord524
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
Zombie_GetTypeInfoCount
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord608
ord319
ProcCallEngine
ord535
ord645
ord648
ord571
ord573
ord685
ord100
ord320
ord321
ord617
ord619
ord581

Sections

.text
Size: 92KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ