9fd5157ccc567b3a1e29f9759328a7f1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9fd5157ccc567b3a1e29f9759328a7f1_JaffaCakes118
Size

80KB
MD5

9fd5157ccc567b3a1e29f9759328a7f1
SHA1

fd2739897549147aba4a041044ec407b15555e7b
SHA256

81162864dbe94ea2f8956a60c7eee15ad2a23a7f8693efdec818838751547d2e
SHA512

f3cab6984c17a425f9a45c80464ea40e12c40a0138f8c29b41973da6c5031c46d7302b842cdde624986efc775929a6b01b393464b01764fba5514eb40b019b21
SSDEEP

384:01xq3UZU9gIsxp6t1bp819hBe8/hpzKa8PjF9Smu93kO6P6Pq6PpkUCUm/xb:GZU9gIc6t1bp81FqPp9Smy66SOpkUl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9fd5157ccc567b3a1e29f9759328a7f1_JaffaCakes118

Files

9fd5157ccc567b3a1e29f9759328a7f1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

305d6ab4359e31de4a6b3a0add9d259d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
MethCallEngine
EVENT_SINK_Invoke
Zombie_GetTypeInfo
ord592
ord303
ord304
ord598
ord599
ord520
ord309
ord632
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
Zombie_GetTypeInfoCount
EVENT_SINK_Release
ord600
ord310
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord312
ord712
ord607
ord319
ProcCallEngine
ord645
ord648
ord571
ord573
ord685
ord100
ord320
ord612
ord321
ord616
ord617
ord546

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ