aaca7a03c9b2c2ae532a51ca350f53a0_JaffaCakes118 | Triage

Sharing

General

Target

aaca7a03c9b2c2ae532a51ca350f53a0_JaffaCakes118
Size

416KB
MD5

aaca7a03c9b2c2ae532a51ca350f53a0
SHA1

c9795147270e851973b9ca3c92152fecd78b9ac5
SHA256

43a0a195c09b36912c4ca6619f8396ebd69bf8754875a37ac7a50df499c7c32e
SHA512

a3107b5178fe46bf83a95902ee7038d30582f4e9b78ad61940c4dc30e1b6a791295120a8c4508f7c5aa16eb514ff80d0e1d2754e18cdec0136ea7e50f13fbf3f
SSDEEP

6144:KZ6Lq1o0DuqvadqNoSZu0umG4QHmiFCN8xLr:KhoSZu0umGpmiA85

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aaca7a03c9b2c2ae532a51ca350f53a0_JaffaCakes118

Files

aaca7a03c9b2c2ae532a51ca350f53a0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b76ae3f0bfcc043f0a0acdfe1801a845

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
ord693
ord588
MethCallEngine
EVENT_SINK_Invoke
ord516
ord517
ord519
Zombie_GetTypeInfo
ord593
ord594
ord595
ord596
ord598
ord599
ord520
ord709
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
ord529
ord561
DllFunctionCall
Zombie_GetTypeInfoCount
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord713
ord714
ord608
ord716
ord717
ord319
ProcCallEngine
ord644
ord537
ord645
ord570
ord648
ord681
ord578
ord685
ord100
ord320
ord321
ord616
ord617
ord618
ord581

Sections

.text
Size: 272KB - Virtual size: 270KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 140KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ