d5cd157668d475b11e5eb8c2aa7b3e87_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d5cd157668d475b11e5eb8c2aa7b3e87_JaffaCakes118
Size

220KB
MD5

d5cd157668d475b11e5eb8c2aa7b3e87
SHA1

5fdf3907b1b15be428c3fc23ff750d5707c8a0cb
SHA256

bcb65a8c2f84c9da6e6885adfd0ee69cba95c0fe5b74b4a78267d7647f032554
SHA512

3a6496fbed6aab7775d4ea150a2fdb9001a37b3fd17703948bbdeca505665959d4452a3fdf0cfd600159b52691f42bef33048b32f3ded729937df19d1613dbbb
SSDEEP

3072:/47nd1S20uUL9TOVrgw+f4My2GzeErskkkPKF8/Gcx://TOVrgw+f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5cd157668d475b11e5eb8c2aa7b3e87_JaffaCakes118

Files

d5cd157668d475b11e5eb8c2aa7b3e87_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8c418b4869b170dbbdf277c55c05d275

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
ord694
ord588
MethCallEngine
EVENT_SINK_Invoke
ord516
ord517
ord518
ord519
Zombie_GetTypeInfo
ord591
ord592
ord593
ord594
ord595
ord598
ord599
ord631
ord632
ord526
EVENT_SINK_AddRef
ord527
ord528
ord561
DllFunctionCall
ord563
ord670
Zombie_GetTypeInfoCount
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord606
ord608
ord717
ord319
ProcCallEngine
ord644
ord645
ord570
ord648
ord572
ord681
ord685
ord100
ord320
ord321
ord614
ord616
ord617
ord581

Sections

.text
Size: 212KB - Virtual size: 210KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ