8ccc103519679b7c75ba6e6e2420ec0a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8ccc103519679b7c75ba6e6e2420ec0a_JaffaCakes118
Size

192KB
MD5

8ccc103519679b7c75ba6e6e2420ec0a
SHA1

9d10db4e3adba1fa4ceb319819ac896aabeb9306
SHA256

01a65a2a138291e792aefc1d647986dd81857979e71c2d757d54e915de3b8afb
SHA512

b0e87de2630fbc1d4cdfc822bb324fa872cc492c5aa1c8794506e6e5015a947682e4aa2dd877e9dc7f385f4edc4f5dd158f1a60bfdbdb1dc102258e2a297333f
SSDEEP

3072:8mxUdkLR8B8i8Gt5LLYbROfhWRVkvKQynYHYcjpjCnIUW38hDLAfNG1OoQhf5C:ol1X8ReSQyspjCnNRAA1z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ccc103519679b7c75ba6e6e2420ec0a_JaffaCakes118

Files

8ccc103519679b7c75ba6e6e2420ec0a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e2d8ec35a4aefe1404f7e6c8fcf442f5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
MethCallEngine
EVENT_SINK_Invoke
ord516
Zombie_GetTypeInfo
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
Zombie_GetTypeInfoCount
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ord717
ord537
ord644
ord570
ord573
ord100
ord616
ord619

Sections

.text
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 164KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ