7767fe25672d6af23c0aea25249d6c93_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7767fe25672d6af23c0aea25249d6c93_JaffaCakes118
Size

229KB
MD5

7767fe25672d6af23c0aea25249d6c93
SHA1

80445bac18502818690be009f197ee2d23061fab
SHA256

a2e38960e72840e94de577e2e178682d796f05780a2d415ccb52ca6860783361
SHA512

e2911bd75f7ef8802a2a162218bab8a129b92bc33a8f9fee09fbf170bed5d930f54b396d05170317f0c509e29b848f73f58706c84b8c7141a9bff854f3d858a0
SSDEEP

6144:F28Q5EjLF0cUT/IhmpuiZ+RtmO+S+2oa/Rsjl0ZjDXTP0FQ90:F2lAudMH/aY/XDXr03

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Picture1914.JPG_www.facebook.com

Files

7767fe25672d6af23c0aea25249d6c93_JaffaCakes118
.zip
Picture1914.JPG_www.facebook.com
.exe windows:4 windows x86 arch:x86

2885b91edcf269db2ecf1ad0522f24c8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadIconA

msvbvm60

EVENT_SINK_GetIDsOfNames
ord696
ord698
MethCallEngine
EVENT_SINK_Invoke
ord516
ord517
ord519
ord660
ord557
ord666
ord667
Zombie_GetTypeInfo
ord593
ord300
ord594
ord595
ord702
ord599
ord306
ord709
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
ord529
ord561
DllFunctionCall
ord563
Zombie_GetTypeInfoCount
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord608
ord531
ord716
ord717
ProcCallEngine
ord644
ord537
ord681
ord576
ord685
ord100
ord610
ord616
ord617
ord618
ord580

Sections

.text
Size: 176KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc..
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE