05e2cc08466f92e6458977ae71c6becf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

05e2cc08466f92e6458977ae71c6becf_JaffaCakes118
Size

344KB
MD5

05e2cc08466f92e6458977ae71c6becf
SHA1

30a19f8c7bc1ce97de223ca4b035d61ab3deb425
SHA256

66db8123a94e46cdb989865baab4b9f6b84d093482ef0028dd953b9bf66215f3
SHA512

088bf448675a8ea1eb46aa0ed8fb9bd4c1e746e7eae39b11c23c4e2a5dbe6428f9a4280d2bb68b1e826d60151178c11922aedc18eeefd118bc949a5cf06d1b0f
SSDEEP

6144:I2axOzRYIiKpjATuM2axOzRYIiKpjATuM:nmS7VpjVmS7VpjG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05e2cc08466f92e6458977ae71c6becf_JaffaCakes118

Files

05e2cc08466f92e6458977ae71c6becf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7b0bb116ce47971eb91479d0e812917f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
ord694
ord587
MethCallEngine
EVENT_SINK_Invoke
ord516
ord518
ord626
ord666
ord667
Zombie_GetTypeInfo
EVENT_SINK2_Release
ord592
ord595
ord303
ord598
ord520
ord309
ord631
ord632
ord525
ord526
EVENT_SINK_AddRef
ord528
ord529
ord561
DllFunctionCall
ord563
Zombie_GetTypeInfoCount
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord608
ord716
ord532
ord717
ord319
ord534
ProcCallEngine
ord644
ord537
ord645
ord648
ord570
ord572
EVENT_SINK2_AddRef
ord681
ord685
ord578
ord100
ord320
ord612
ord321
ord616
ord617
ord618
ord619
ord581

Sections

.text
Size: 160KB - Virtual size: 159KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 180KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ