JaffaCakes118_453175f94149f531942bc479cb4003a2 | Triage

Sharing

General

Target

JaffaCakes118_453175f94149f531942bc479cb4003a2
Size

369KB
MD5

453175f94149f531942bc479cb4003a2
SHA1

ec3a7c365b56731733d73d66176301ee6d976c34
SHA256

7f10b2ee1d1f883eec411d772dad1c72d286304294cac016031ca60fa911872c
SHA512

87de77051493b850d895359b9275563208499ffbd9fa899b14ac7202f8c20022bdfe58d5fe7fc2ac6ae14f4485a7e342dda158e6bac9cafca1b76d860dd1508d
SSDEEP

6144:28gbdGlHoXVmfw5mjnBYew8TB5zufIwM057GY+k:RGeHqVEALfIwM+7Ek

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_453175f94149f531942bc479cb4003a2

Files

JaffaCakes118_453175f94149f531942bc479cb4003a2
.exe windows:4 windows x86 arch:x86

086d5a1ddb57231c1c68cfb0063562b8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
MethCallEngine
EVENT_SINK_Invoke
ord516
Zombie_GetTypeInfo
ord595
ord303
ord309
ord709
ord632
EVENT_SINK_AddRef
DllFunctionCall
Zombie_GetTypeInfoCount
EVENT_SINK_Release
ord600
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord717
ProcCallEngine
ord644
ord645
ord648
ord570
ord573
ord685
ord578
ord100
ord616
ord617
ord650

Sections

.text
Size: 72KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ