faf1166e1d17c78ddd7bf3245de47b7f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

faf1166e1d17c78ddd7bf3245de47b7f_JaffaCakes118
Size

401KB
MD5

faf1166e1d17c78ddd7bf3245de47b7f
SHA1

8921665b7d126f44ae8eab5339e05c7e2b2aeb2c
SHA256

aee4bea36fc3fedc4ad64fa0ec53aa86c36e8dcf9c4990f816c5c4c3d3791a22
SHA512

9043178ab28700307e3e1aade73533126aa1a4bfc368a4ba4a1db30ff4f8cd94a24b0fe53b4c7a04afecfe67dec954955fd2b541f92d4d39924ba2b134db2098
SSDEEP

6144:/Kg5tJXb8KgFXiaaVPhsHMwq2VWU/5kWjRJHbBYseP4fJpS9snJ4rbDMf1d:vt9bDgFX8vwq2VWS9YuJp5n+DOd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
faf1166e1d17c78ddd7bf3245de47b7f_JaffaCakes118

Files

faf1166e1d17c78ddd7bf3245de47b7f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b9cb12f3a077e434172d83258b954aaa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
ord588
MethCallEngine
EVENT_SINK_Invoke
ord516
ord665
Zombie_GetTypeInfo
ord593
ord594
ord595
ord520
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
Zombie_GetTypeInfoCount
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ord717
ord319
ProcCallEngine
ord535
ord644
ord537
ord570
ord685
ord100
ord320
ord321
ord613
ord581

Sections

.text
Size: 84KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ