06c17213b6fce5ffc747c1e3fc4eab1f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06c17213b6fce5ffc747c1e3fc4eab1f_JaffaCakes118
Size

236KB
MD5

06c17213b6fce5ffc747c1e3fc4eab1f
SHA1

6a628559914db822302b89a65f752d40cc363698
SHA256

dda58a2fc0eacfb130f83e9df912aca9e28a44cc7948b2dbe86dc16e12f53f35
SHA512

23bd9aad9325b8c8ce310744cc6f2612854e4f2a8f0fc7a94e7111adaa5b9a733348dd0b1b7ea6d03034321fff69921127505ef6e92734ffa9d11519f690fae8
SSDEEP

3072:gc0wEWjOoUlgav0jiTqPgGaMJtdbaOddc0wEWC8c0wEWu:YwEbgaM+TdGuOdzwEkwE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06c17213b6fce5ffc747c1e3fc4eab1f_JaffaCakes118

Files

06c17213b6fce5ffc747c1e3fc4eab1f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

91afdb472ca060bd21f4a1434020d548

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
ord588
MethCallEngine
EVENT_SINK_Invoke
ord517
Zombie_GetTypeInfo
ord595
ord598
ord599
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
Zombie_GetTypeInfoCount
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord608
ord717
ord319
ProcCallEngine
ord644
ord570
ord681
ord685
ord100
ord320
ord321
ord581

Sections

.text
Size: 128KB - Virtual size: 127KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 104KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ