165cd7e02bfeb434e8679b02e3dcd8d9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

165cd7e02bfeb434e8679b02e3dcd8d9_JaffaCakes118
Size

331KB
MD5

165cd7e02bfeb434e8679b02e3dcd8d9
SHA1

9f03027597529a7de1f7d5acd691591cafb2935e
SHA256

e42749e4d0ac90a93827c94c9106bdab85497cd162363da276ea59077f32c1d9
SHA512

a624dc273d45c55afd599704bcda0cb717a4950d9f9d54807e7946f74861825d82beb669d78567a10e805c109868beb3aa84c98d375be25fa121dba345324a1d
SSDEEP

6144:g1XCLuXarKb5tKgHYVtPkp+FIYZoYw4XhO7a:QXCLuz6rPkcIYZ/XM7a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
165cd7e02bfeb434e8679b02e3dcd8d9_JaffaCakes118

Files

165cd7e02bfeb434e8679b02e3dcd8d9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9c6a08c007bbd035fa3afbc7490e5716

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
MethCallEngine
EVENT_SINK_Invoke
ord516
ord660
ord662
ord667
Zombie_GetTypeInfo
ord669
ord595
ord599
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
Zombie_GetTypeInfoCount
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord607
ord608
ord716
ord717
ord319
ProcCallEngine
ord644
ord537
ord573
ord681
ord576
ord578
ord100
ord320
ord321
ord616
ord618
ord546
ord581

Sections

.text
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ruwq8rd
Size: 152KB - Virtual size: 152KB