8e5feb1371f75710d0e50d10f742be62_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8e5feb1371f75710d0e50d10f742be62_JaffaCakes118
Size

220KB
MD5

8e5feb1371f75710d0e50d10f742be62
SHA1

9e7c4efbada2acaf5acb9762a36a6dea9cb30fa5
SHA256

46b80eb4a1270e1a6006249c9bfa977ff41c1cbc9ad603e18faec3f2bfa846b1
SHA512

5e9886f7e46aa4faa014987dde5409b6279f6bf44423e334cbaaa9c18c9985a2172fca6b27957ba4c9dae39b54a461a37e3611480d1ac8d116e79374b96612c0
SSDEEP

3072:v4id7Pj4PgHTGZdFp+gmWVTfIBFS5UBic:QidbjX6F9vfIC4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e5feb1371f75710d0e50d10f742be62_JaffaCakes118

Files

8e5feb1371f75710d0e50d10f742be62_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d755de4cf7a1a5e27a5ee935c8761d5d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
MethCallEngine
EVENT_SINK_Invoke
ord660
ord662
ord666
Zombie_GetTypeInfo
ord669
ord593
ord594
ord595
ord599
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
Zombie_GetTypeInfoCount
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord713
ord716
ord717
ord319
ProcCallEngine
ord537
ord644
ord572
ord100
ord320
ord321
ord616
ord617
ord619
ord546

Sections

.text
Size: 88KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.3data
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE