5773acbeaf1840cb260947e15813abac_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5773acbeaf1840cb260947e15813abac_JaffaCakes118
Size

88KB
MD5

5773acbeaf1840cb260947e15813abac
SHA1

26bbba48446c8c1c8c5c2e877f0ca6b5e2f9615d
SHA256

0ec6f4d8d80e704900dbd7552f84090c3d3c29b292c89ff50d763bc280a7448c
SHA512

a076a29f22af135f0cb29e2428b19e87adb920c60b7be6bb2de96a97ae97e49fe0b07c590d6bc9840a3621d4a2e5a9dab3a62571db56f93aa9f01d89ebc90dd5
SSDEEP

768:vJqh67ddN8cABT0JtDeJZdsMclqKJKmD49Kuwq17JCuYCtA7KVpYhzxLTAPwbg11:vJqhegKR+ZdsTv8j1tCuxpIxLr6TkY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5773acbeaf1840cb260947e15813abac_JaffaCakes118

Files

5773acbeaf1840cb260947e15813abac_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ae670b4dfdbd847dbf64f4a022881591

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
ord694
ord588
MethCallEngine
EVENT_SINK_Invoke
ord518
Zombie_GetTypeInfo
ord592
ord595
ord598
ord520
ord631
ord632
EVENT_SINK_AddRef
ord529
ord561
DllFunctionCall
ord563
Zombie_GetTypeInfoCount
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord531
ord716
ord717
ord319
ProcCallEngine
ord644
ord645
ord573
ord578
ord685
ord100
ord320
ord321
ord616
ord617
ord618
ord581

Sections

.text
Size: 80KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ