d5e7d1b049ff3f6db4911b69eb8b9dba_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d5e7d1b049ff3f6db4911b69eb8b9dba_JaffaCakes118
Size

144KB
MD5

d5e7d1b049ff3f6db4911b69eb8b9dba
SHA1

9d4ba0bcdbd9a5b0dfdfe5604992eecef40ca8ad
SHA256

e9a44566d5e9cbd1e21ef11d41326401cf9c5839d8419217991c6fb210f46863
SHA512

d671f7f651060ee8a9c2a43387026764047decc68cb19e09917eb3e2d9b1eba825f2b7dacdc7dd1725eee919fc8cfa18de088d0c3fc6256320b388add78da6fe
SSDEEP

1536:WyZVwTG1DgiF6yOk8+VdsJqffcjJ1iHNaRhpCX1cOJPlQRt5u:Wogk6yO0sI3qTitaRhucm9ktU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5e7d1b049ff3f6db4911b69eb8b9dba_JaffaCakes118

Files

d5e7d1b049ff3f6db4911b69eb8b9dba_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fdef35ba14851267a7f1e6e8a83a8b79

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
ord690
ord694
MethCallEngine
EVENT_SINK_Invoke
ord621
ord516
ord517
ord660
ord666
Zombie_GetTypeInfo
ord592
ord595
ord598
ord599
ord520
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
ord529
ord561
DllFunctionCall
ord563
Zombie_GetTypeInfoCount
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord606
ord713
ord714
ord607
ord608
ord716
ord531
ord717
ord532
ord319
ProcCallEngine
ord535
ord644
ord537
ord645
ord570
ord648
ord576
ord578
ord685
ord100
ord689
ord610
ord320
ord612
ord321
ord616
ord617
ord619
ord546
ord581

Sections

.text
Size: 136KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ