d454a48492c20067929bc60f336829ca_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d454a48492c20067929bc60f336829ca_JaffaCakes118
Size

56KB
MD5

d454a48492c20067929bc60f336829ca
SHA1

ee2e24563f034a25fd27037e799c9ff80ae3e288
SHA256

dc1a12a2f59b11e58ad31e349c889a2e16776ecf22b75bbb3b73a80fc52e1847
SHA512

ddab6884958aa698ce72db886b56690c86f117e009c5aa1ba480a6488a89f8bc999dcd581b1daeb1465de41a6bde3098c80deaae11f12ad7d4b42bd72ccc097b
SSDEEP

1536:orL94BfunbjwCb8C7UnfYxoE9C1Q0Fnie0FT98nt:orL94BfunbjTb4nFv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d454a48492c20067929bc60f336829ca_JaffaCakes118

Files

d454a48492c20067929bc60f336829ca_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a18b8b1e2cfa9c6fa9831f7dbb65b49b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
MethCallEngine
EVENT_SINK_Invoke
ord516
Zombie_GetTypeInfo
ord595
ord303
ord309
ord709
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
Zombie_GetTypeInfoCount
EVENT_SINK_Release
ord600
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord608
ord717
ProcCallEngine
ord644
ord645
ord648
ord570
ord573
ord685
ord100
ord616
ord617
ord650

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ