8a137ad4857281e48572edca0fd75c25_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8a137ad4857281e48572edca0fd75c25_JaffaCakes118
Size

92KB
MD5

8a137ad4857281e48572edca0fd75c25
SHA1

9b483e2923208b33b71ec1695bbbc65fead5cd99
SHA256

4147502d5ba3c7caeac5115569071a44e7910fcd7dc1c52cb132a398e8b8ab90
SHA512

899792fae4dee872bd650cf5917740d94d792f8d84bd5c85aac3cf7e70b796a598e1944c092a47e1674e612dffaa78843a743d17e88ebe3827ebb832840602f7
SSDEEP

1536:y1/8+vT3c0UuoVyraM1OU3+pcZt4hrC+Wcw:K8+vDCBTUuOt4ht5w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8a137ad4857281e48572edca0fd75c25_JaffaCakes118

Files

8a137ad4857281e48572edca0fd75c25_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b9cb12f3a077e434172d83258b954aaa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
ord588
MethCallEngine
EVENT_SINK_Invoke
ord516
ord665
Zombie_GetTypeInfo
ord593
ord594
ord595
ord520
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
Zombie_GetTypeInfoCount
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ord717
ord319
ProcCallEngine
ord535
ord644
ord537
ord570
ord685
ord100
ord320
ord321
ord613
ord581

Sections

.text
Size: 84KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ