78b8439b1a264585b724276379798dae_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

78b8439b1a264585b724276379798dae_JaffaCakes118
Size

144KB
MD5

78b8439b1a264585b724276379798dae
SHA1

31e531877592fd943bff9af3c89a8b917f5684c0
SHA256

f8bb9a0d90392edc09c5d51447b798a69512223850e6288333a5c1b3a7f6526a
SHA512

7433268be45ae68152033d3ecb33ee5d52634d6ed4a87089b2e59a61bb71cc46f1673000da966d0d7f450fc48c6f8a39d562ca8a1880ae3a34292fde738eb7b9
SSDEEP

3072:FRRvurQqpcO2mfX8K6K4DkqVpEiBBbByUCBq1kr04ED0Lb2kRrjR46PLqXdU5:9yQ9mJ6K46Bqur04BLqtG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78b8439b1a264585b724276379798dae_JaffaCakes118

Files

78b8439b1a264585b724276379798dae_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

9cedb85cb6eefc2374f192085a9cc2e2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
ord690
MethCallEngine
EVENT_SINK_Invoke
ord516
ord626
ord667
Zombie_GetTypeInfo
EVENT_SINK2_Release
ord709
ord631
ord525
ord632
EVENT_SINK_AddRef
DllFunctionCall
Zombie_GetTypeInfoCount
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord717
ord319
ProcCallEngine
ord644
ord537
ord572
EVENT_SINK2_AddRef
ord685
ord101
ord102
ord103
ord689
ord104
ord105
ord320
ord612
ord321
ord616
ord618
ord546
ord581

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 132KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ