d60573c02fbad1ac8b1713c477777828_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d60573c02fbad1ac8b1713c477777828_JaffaCakes118
Size

992KB
MD5

d60573c02fbad1ac8b1713c477777828
SHA1

6c289af9b38d45519c91c46ae5802df2a2b8c829
SHA256

1699c39ff3ad8f24ed6563de7cc54aeff69ea73f745bc264ecfbee02a6518b16
SHA512

9f1be498d3728d2f82a7b77113239935466127129e3df2a549fd6a2c29137a9945901b9959efe55da19b62e772a252d53833df47318ed6699d1849f92775f892
SSDEEP

12288:FTeBPrTmlbvqdWgSAiVaicDAshIba6hNmD1nZCz0EwmuqRLvwIBkMRS:F+dWg8VN/NmtZCz0EfRLTkz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d60573c02fbad1ac8b1713c477777828_JaffaCakes118

Files

d60573c02fbad1ac8b1713c477777828_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e8d84e917d43663a9b19a0a5a3906f3e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
ord588
ord697
MethCallEngine
EVENT_SINK_Invoke
ord516
ord519
ord662
ord558
ord667
Zombie_GetTypeInfo
ord669
ord591
EVENT_SINK2_Release
ord593
ord594
ord595
ord598
ord520
ord523
ord709
ord631
ord632
ord525
ord526
EVENT_SINK_AddRef
ord527
ord528
ord529
DllFunctionCall
ord563
ord568
Zombie_GetTypeInfoCount
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord713
ord606
ord608
ord530
ord609
ord716
ord531
ord533
ProcCallEngine
ord644
ord537
ord645
ord538
ord647
ord648
ord571
ord572
EVENT_SINK2_AddRef
ord578
ord685
ord100
ord610
ord616
ord617
ord618
ord650
ord543
ord544
ord546
ord547
ord581

Sections

.text
Size: 200KB - Virtual size: 196KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ