787cf8c95a5d4cbca6ac447716543a16_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

787cf8c95a5d4cbca6ac447716543a16_JaffaCakes118
Size

72KB
MD5

787cf8c95a5d4cbca6ac447716543a16
SHA1

79ae7054fb9082e35b419aa21e920b5f7f03a41e
SHA256

f389c5ebda1539fe040f6f3a84cf3492d048dc6d3a550ced7d6b3e5d9d632b89
SHA512

739cdb2a74b0b83ec6ee1d405e9fd6a1b7657e3d806aa7201bf6659958aef4a39559cf5465c627fe3de5e814ab2473adfbe096b4a6ecb0b70ebf512b4d084e70
SSDEEP

1536:uow8dfP9PwX/pxMUcEskfnvtfPajKiiKAdlLHuT84TuNFT:fDdfP9P4KDKNFT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
787cf8c95a5d4cbca6ac447716543a16_JaffaCakes118

Files

787cf8c95a5d4cbca6ac447716543a16_JaffaCakes118
.exe windows:4 windows x86 arch:x86

77f8bb64b0dc994ab98068c9a4a377ea

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
ord694
MethCallEngine
EVENT_SINK_Invoke
ord516
ord666
Zombie_GetTypeInfo
ord592
ord595
ord598
ord631
ord632
EVENT_SINK_AddRef
ord561
DllFunctionCall
ord563
Zombie_GetTypeInfoCount
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord606
ord608
ord716
ord717
ord319
ProcCallEngine
ord644
ord685
ord100
ord320
ord321
ord616
ord617
ord618
ord581

Sections

.text
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ