252ef7c81ebbc6283038b141bcbff50a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

252ef7c81ebbc6283038b141bcbff50a_JaffaCakes118
Size

120KB
MD5

252ef7c81ebbc6283038b141bcbff50a
SHA1

9ea96d51b8dd580c282c330a735e66793738cb68
SHA256

58beea4544b96e1a749fd93b9a0127ff846db458c8be6c49f07e9a308c8a43bf
SHA512

c3f50d5720af821b8153b37f070b3944e6ae7bfe25f8c857d1e25ab2da223ecd2d764eee894feb80fc6e60fb63f8e43870285970b50efb8bcbefd4d85f898891
SSDEEP

1536:2sPPkcp+ZSNwP3iwqzXvjAof84ZFrPCnV+/KP/B0SmDQCkrLkHAS7scDPtl4lCKG:2sUcp+ZSNwaXAob7rPCo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
252ef7c81ebbc6283038b141bcbff50a_JaffaCakes118

Files

252ef7c81ebbc6283038b141bcbff50a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3488e9c6ef3cfcc3e97c66abe94e3ccc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
MethCallEngine
EVENT_SINK_Invoke
ord516
ord518
ord519
Zombie_GetTypeInfo
ord301
ord596
ord598
ord599
ord520
ord307
ord709
ord631
ord632
ord525
EVENT_SINK_AddRef
ord528
ord529
ord561
DllFunctionCall
Zombie_GetTypeInfoCount
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord606
ord607
ord608
ord531
ord716
ord319
ProcCallEngine
ord535
ord644
ord537
ord645
ord647
ord570
ord648
ord681
ord685
ord578
ord100
ord320
ord321
ord616
ord617
ord619
ord650
ord581

Sections

.text
Size: 108KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ