a696f13de9731844e6510250d5fee956_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a696f13de9731844e6510250d5fee956_JaffaCakes118
Size

180KB
MD5

a696f13de9731844e6510250d5fee956
SHA1

3d6e5cde6b2569959c0ae17ac659cf9741bce63b
SHA256

4f39c5009ac218258c5142fff2e898efc07943046cbcf8252d4e53877896eed8
SHA512

786fe4cc38789636549df8940667c8f7bd3239012623f1e2aedfba89b7ffbf8a726d54e88b7ef758ad20fb06c67100160863ad836a2e4b5d93d26d0ba8c71608
SSDEEP

3072:CYAZrE88bI+3LADeKfzldBJqBcWKekovKZ:Kq8udJEmKeRK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a696f13de9731844e6510250d5fee956_JaffaCakes118

Files

a696f13de9731844e6510250d5fee956_JaffaCakes118
.exe windows:4 windows x86 arch:x86

131ae01b3ec014d6adde5cb345b0d553

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
MethCallEngine
EVENT_SINK_Invoke
ord516
ord518
ord660
Zombie_GetTypeInfo
ord300
ord595
ord599
ord306
ord520
ord631
ord709
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
Zombie_GetTypeInfoCount
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord531
ord319
ProcCallEngine
ord537
ord645
ord648
ord570
ord573
ord681
ord576
ord578
ord100
ord320
ord321
ord616
ord617
ord618
ord650
ord546

Sections

.text
Size: 172KB - Virtual size: 169KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ