bbc32eadc4bc78470179cdf287bacf20_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bbc32eadc4bc78470179cdf287bacf20_JaffaCakes118
Size

148KB
MD5

bbc32eadc4bc78470179cdf287bacf20
SHA1

ce06b06fd76716c00e810fd203f74fab07f9a64e
SHA256

7326b84f6e900d93f0f60c296d36d086034b464596a2479a295bfd776a7a3c78
SHA512

e5b7c189e870a0a38309bc40225600f1a246e974292ad0df394190522fab62bd86508f04b653bb4bfb2682b75f14402f8e7a8e9413d353d969a8793f7c2f855d
SSDEEP

1536:yKF4wbYaSuZoUXzIOeA5Wys/XG6XB/yR6RmpITVfgin1iz91jq8UG:v4AYMjdWyOXZXB/yRpKNgin1izbu8UG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bbc32eadc4bc78470179cdf287bacf20_JaffaCakes118

Files

bbc32eadc4bc78470179cdf287bacf20_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bcb3724c7004edcdcc44a87ebda5291c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
ord694
ord697
MethCallEngine
ord512
EVENT_SINK_Invoke
ord514
ord516
ord517
ord626
ord628
ord660
ord666
Zombie_GetTypeInfo
ord595
ord598
ord631
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord563
Zombie_GetTypeInfoCount
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord710
ord711
ord607
ord608
ord716
ord717
ord319
ProcCallEngine
ord644
ord537
ord645
ord570
ord572
ord576
ord578
ord685
ord100
ord610
ord320
ord612
ord321
ord616
ord617
ord619

Sections

.text
Size: 88KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ