f473692f4b718d7850b672c99fccb2cc_JaffaCakes118

General

Target
f473692f4b718d7850b672c99fccb2cc_JaffaCakes118
Size 428KB
Sample240416-16v5qsff4x
SHA256 1188779775e7326884f2a6ec4f2bdc62d8bfc0451c849934f12a9e6eb24f70c6
MD5 f473692f4b718d7850b672c99fccb2cc
SHA1 af51131a92aeb3a254bfe90bf0c89c2a68156a2d
SHA512 c0d0069c28431a2d368d8178b8e44ae4e2ac0ddd3ab51133521dcfa22c972742c4038e6dc8cef8fb468736008e127ce2c15019be326839ea99265df537db95e8
SSDEEP 12288:ezQZMyKm15nUCubAtOrQQlawKE6cd76qz6Q7rEeQ:ezQZMyKCUCubAt+DQwuA7rzoeQ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f473692f4b718d7850b672c99fccb2cc_JaffaCakes118

File Explorer

f473692f4b718d7850b672c99fccb2cc_JaffaCakes118

.exe 428KB

f473692f4b718d7850b672c99fccb2cc_JaffaCakes118

IMPHASH a00ccfb33be6051950c7b4542bbec804
SHA256 1188779775e7326884f2a6ec4f2bdc62d8bfc0451c849934f12a9e6eb24f70c6
MD5 f473692f4b718d7850b672c99fccb2cc
SHA1 af51131a92aeb3a254bfe90bf0c89c2a68156a2d
SHA512 c0d0069c28431a2d368d8178b8e44ae4e2ac0ddd3ab51133521dcfa22c972742c4038e6dc8cef8fb468736008e127ce2c15019be326839ea99265df537db95e8
SSDEEP 12288:ezQZMyKm15nUCubAtOrQQlawKE6cd76qz6Q7rEeQ:ezQZMyKCUCubAt+DQwuA7rzoeQ
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5152

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarSub _CIcos _adj_fptan __vbaVarMove __vbaVarVargNofree __vbaAryMove __vbaFreeVar __vbaStrVarMove __vbaLenBstr __vbaFreeVarList __vbaPut3 __vbaEnd _adj_fdiv_m64 __vbaFreeObjList ord516 _adj_fprem1 ord518 __vbaStrCat __vbaHresultCheckObj __vbaLenVar _adj_fdiv_m32 ord666 __vbaAryDestruct __vbaVarForInit __vbaOnError _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i _CIsin __vbaVargVarMove ord632 __vbaChkstk __vbaFileClose EVENT_SINK_AddRef ord528 __vbaGet3 __vbaStrCmp __vbaVarTstEq __vbaObjVar DllFunctionCall _adj_fpatan EVENT_SINK_Release ord600 _CIsqrt EVENT_SINK_QueryInterface __vbaExceptHandler _adj_fprem _adj_fdivr_m64 ord607 ord608 ord716 __vbaFPException ord717 __vbaInStrVar __vbaStrVarVal __vbaVarCat _CIlog __vbaErrorOverflow __vbaFileOpen __vbaNew2 ord570 __vbaVar2Vec _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord100 __vbaVarSetVar __vbaI4Var __vbaVarCmpEq __vbaLateMemCall __vbaVarAdd __vbaVarDup __vbaVarMod __vbaVarCopy _CIatan __vbaStrMove _allmul _CItan __vbaVarForNext _CIexp __vbaFreeObj __vbaFreeStr

Sharing

General

Malware Config

Signatures

File Explorer

f473692f4b718d7850b672c99fccb2cc_JaffaCakes118

msvbvm60

generic