d90a33ac1d1845428baec0765efe1796_JaffaCakes118 | Triage

Sharing

General

Target

d90a33ac1d1845428baec0765efe1796_JaffaCakes118
Size

484KB
MD5

d90a33ac1d1845428baec0765efe1796
SHA1

41d4d07095aee2ffe20497a4d1621f764a33ee73
SHA256

ad4cc7d0639d95613f2c3a7b26c644e4bcbd5c4d9325a1dd48b7280124923a7a
SHA512

f98d8ce2efa86f41e6eec39cae9f95064f5e154cc03543960236f77407146e0e35470cdbf9e4bd503fd8ca8ededb4468ee3b06eeeed858e846d96dd0cc3c0d2a
SSDEEP

12288:YRQmDsgDPIAnsJ8Q19/vA80Tk+Lf2hgQmUQj3MFgb0ZCznzMs14AEoeli:yk+Lf27mUJFBunzz4AEoe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d90a33ac1d1845428baec0765efe1796_JaffaCakes118

Files

d90a33ac1d1845428baec0765efe1796_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9cd5a5bbe5079693ab9a89cedca39a6d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
MethCallEngine
EVENT_SINK_Invoke
ord516
ord517
ord518
ord626
ord666
Zombie_GetTypeInfo
ord598
ord631
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
Zombie_GetTypeInfoCount
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord607
ord608
ord716
ord717
ord319
ProcCallEngine
ord644
ord570
ord648
ord573
ord685
ord100
ord579
ord320
ord321
ord616
ord618
ord581

Sections

.text
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 448KB - Virtual size: 446KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ