f175c34c3f9120231b103bd0ef6e13f1_JaffaCakes118

General

Target
f175c34c3f9120231b103bd0ef6e13f1_JaffaCakes118
Size 320KB
Sample240415-tl5ecaae85
SHA256 e0f00a909c84ca44cf2af2c13c9f1aed50e1a8fdeedea378828220769ad4a4c9
MD5 f175c34c3f9120231b103bd0ef6e13f1
SHA1 9e4b84399bf23e45e64f0fc6f4edc011462ad4f8
SHA512 c303e0e9d37088ae545d175769c09847622824f196f8691963e3df9a644be9c82cfebe3c14d71069653193ef4791801b503c7148349f94fea11c96a96577cfad
SSDEEP 1536:rwPGSmhCmW7G/K+BX7Fd2dKJQmE8H2Xv04gnACskYPrx9GDgw/PVQ:UGSkX/K+BX7pJ/mvQzskYPrx9GDlC
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f175c34c3f9120231b103bd0ef6e13f1_JaffaCakes118

File Explorer

f175c34c3f9120231b103bd0ef6e13f1_JaffaCakes118

.exe 320KB

f175c34c3f9120231b103bd0ef6e13f1_JaffaCakes118

IMPHASH f7ad6596df3cbb9b8e8d6ebba77f5081
SHA256 e0f00a909c84ca44cf2af2c13c9f1aed50e1a8fdeedea378828220769ad4a4c9
MD5 f175c34c3f9120231b103bd0ef6e13f1
SHA1 9e4b84399bf23e45e64f0fc6f4edc011462ad4f8
SHA512 c303e0e9d37088ae545d175769c09847622824f196f8691963e3df9a644be9c82cfebe3c14d71069653193ef4791801b503c7148349f94fea11c96a96577cfad
SSDEEP 1536:rwPGSmhCmW7G/K+BX7Fd2dKJQmE8H2Xv04gnACskYPrx9GDgw/PVQ:UGSkX/K+BX7pJ/mvQzskYPrx9GDlC
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5124

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

_CIcos _adj_fptan __vbaVarMove __vbaVarVargNofree __vbaFreeVar __vbaAryMove __vbaLenBstr __vbaStrVarMove ord696 __vbaFreeVarList __vbaEnd _adj_fdiv_m64 __vbaFreeObjList ord516 _adj_fprem1 ord628 __vbaCopyBytes __vbaStrCat __vbaSetSystemError __vbaLenBstrB __vbaHresultCheckObj ord665 _adj_fdiv_m32 __vbaAryDestruct ord595 _adj_fdiv_m16i ord597 _adj_fdivr_m16i __vbaVarIndexLoad ord599 _CIsin __vbaErase __vbaVarZero ord525 __vbaChkstk EVENT_SINK_AddRef __vbaStrCmp __vbaAryConstruct2 DllFunctionCall __vbaFpUI1 __vbaLbound _adj_fpatan __vbaRedim __vbaUI1ErrVar EVENT_SINK_Release ord601 _CIsqrt EVENT_SINK_QueryInterface __vbaExceptHandler __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 __vbaFPException __vbaUbound __vbaStrVarVal __vbaVarCat ord644 ord537 _CIlog __vbaNew2 __vbaInStr _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord100 __vbaVarTstNe __vbaI4Var __vbaAryLock __vbaVarDup __vbaStrToAnsi __vbaVarCopy ord616 _CIatan __vbaAryCopy __vbaStrMove _allmul _CItan __vbaAryUnlock __vbaFPInt _CIexp __vbaFreeObj __vbaFreeStr __vbaI4ErrVar

Sharing

General

Malware Config

Signatures

File Explorer

f175c34c3f9120231b103bd0ef6e13f1_JaffaCakes118

msvbvm60

generic