8e8a705572c0d11f2e423c60600c6d4d_JaffaCakes118 | Triage

Sharing

General

Target

8e8a705572c0d11f2e423c60600c6d4d_JaffaCakes118
Size

112KB
MD5

8e8a705572c0d11f2e423c60600c6d4d
SHA1

93e910a6718fe93d4537da53af6b283848040c0d
SHA256

dcc26b4c0bcbd56b597e61c1cb40bb55b28a2b6e4da19a8e3c63b70c273ed5da
SHA512

93f83f80b2a41a97c6c53ca20d4ab0242211c7f3a20842dd88c093de1b6c000ed42a74904f0fd40a37ec7d1e4fa6d5059c628cc58bfb4ae11d515b1c8eacf646
SSDEEP

1536:0HNRt9OO64iidl/dsPhw1uX0cHPO/DEZldH:QJL64iisJIifvhZl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e8a705572c0d11f2e423c60600c6d4d_JaffaCakes118

Files

8e8a705572c0d11f2e423c60600c6d4d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0a2964a122a3d992cc615ed9b15b90bb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
ord694
MethCallEngine
EVENT_SINK_Invoke
ord516
ord558
Zombie_GetTypeInfo
ord592
ord595
ord598
ord631
ord526
EVENT_SINK_AddRef
ord529
ord561
DllFunctionCall
ord563
Zombie_GetTypeInfoCount
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord606
ord607
ord608
ord717
ord319
ProcCallEngine
ord535
ord644
ord537
ord648
ord571
ord573
ord576
ord685
ord100
ord320
ord612
ord321
ord616
ord617
ord581

Sections

.text
Size: 96KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ