dad4a1cb7825efed0bf8fa7e7623003f_JaffaCakes118 | Triage

Sharing

General

Target

dad4a1cb7825efed0bf8fa7e7623003f_JaffaCakes118
Size

68KB
MD5

dad4a1cb7825efed0bf8fa7e7623003f
SHA1

e1216942f9d65edf55150c4fb2489f84eb91726f
SHA256

60ae61c396dc65adc2720febf2fa98abc4999053e71899350ab93da6d409468c
SHA512

b571a4a8e58b94cb60a74a45db501cbb0b8679c5ac3b0900db4bdb26d4b6cc88acef12133724b3f419db5ad5242ff9fff5af8f0ea3226577e115c70a891a345b
SSDEEP

768:INaHjieU1JsCsrf2bLhmnfB6JG8mfTgNAcmXaBqgp1qGCMe:INEjK1lsrAlmfBcG80eAXXaUgbqGW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dad4a1cb7825efed0bf8fa7e7623003f_JaffaCakes118

Files

dad4a1cb7825efed0bf8fa7e7623003f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3251fb8f4f4b7de77b8ead38076b4889

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
ord694
ord696
ord697
MethCallEngine
EVENT_SINK_Invoke
ord660
ord667
Zombie_GetTypeInfo
ord592
ord595
ord598
ord520
ord631
ord526
EVENT_SINK_AddRef
ord527
ord529
ord561
DllFunctionCall
ord563
Zombie_GetTypeInfoCount
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord606
ord607
ord714
ord608
ord717
ord319
ProcCallEngine
ord644
ord645
ord570
ord648
ord685
ord578
ord100
ord610
ord320
ord612
ord321
ord616
ord617
ord581

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ