1202702113b250cd2e8c31560e076b4f_JaffaCakes118 | Triage

Sharing

General

Target

1202702113b250cd2e8c31560e076b4f_JaffaCakes118
Size

600KB
MD5

1202702113b250cd2e8c31560e076b4f
SHA1

028f5a84ee35b6be74d1528ecf4a9ed6b5cf6da0
SHA256

eff3fbc9d270704aaf9aafefab66f79088d83754cd1bf1cb15dfdde0f316eaeb
SHA512

6c5f090162867ad27e1cc0e528f5374c1fc04d407395ae80bcb47cd4569bb7185b9445e7fb54d7e222dbad7b32e5d08dca3b9408c79acac0a09374e783c5eee8
SSDEEP

6144:YngCk+rHipMtpAj54bKpnvfgWE1v/ECk+rHipMtpAj54bKzl6fAGy2JYHijt2Ni9:YnPveMtpAN+WnHgn/jveMtpAN+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1202702113b250cd2e8c31560e076b4f_JaffaCakes118

Files

1202702113b250cd2e8c31560e076b4f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d23bef924c1bf577622842d0fbf9bb39

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
ord588
MethCallEngine
EVENT_SINK_Invoke
ord517
ord660
Zombie_GetTypeInfo
ord595
ord598
ord599
ord631
EVENT_SINK_AddRef
ord529
DllFunctionCall
Zombie_GetTypeInfoCount
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord319
ord644
ord681
ord100
ord320
ord321
ord581

Sections

.text
Size: 592KB - Virtual size: 591KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ