f3e95567ee9ece690c044ea8447d91c7_JaffaCakes118

General

Target
f3e95567ee9ece690c044ea8447d91c7_JaffaCakes118
Size 1.2MB
Sample240416-vfdvwagh8y
SHA256 0510651b5b1269059c6ebcaafbb770ac7cce1850f7b3c2508b83ed311afa7e86
MD5 f3e95567ee9ece690c044ea8447d91c7
SHA1 e23380d8bbd5fcd5f435aae29ac925533fcdf3d0
SHA512 31d92cb87c477eaf5594e659415a1c02e4ca76202746da71d8b0ac1d48cd079de5f9b65bce413d729a5083726ec99aa6b6cb01371eafa2a6cdb8a54955284c6d
SSDEEP 24576:f5z9C4nqDGvx09BTw4VkFpSg3MQxs7LEd5vSelzY6Mba1psk0nj4Q:f5z4Kzvx03DmpSg3BxgLEd56e+6wmukU
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f3e95567ee9ece690c044ea8447d91c7_JaffaCakes118

File Explorer

f3e95567ee9ece690c044ea8447d91c7_JaffaCakes118

.exe 1.2MB

f3e95567ee9ece690c044ea8447d91c7_JaffaCakes118

IMPHASH 8ae7ac3db9801eca2c244f8d64a55493
SHA256 0510651b5b1269059c6ebcaafbb770ac7cce1850f7b3c2508b83ed311afa7e86
MD5 f3e95567ee9ece690c044ea8447d91c7
SHA1 e23380d8bbd5fcd5f435aae29ac925533fcdf3d0
SHA512 31d92cb87c477eaf5594e659415a1c02e4ca76202746da71d8b0ac1d48cd079de5f9b65bce413d729a5083726ec99aa6b6cb01371eafa2a6cdb8a54955284c6d
SSDEEP 24576:f5z9C4nqDGvx09BTw4VkFpSg3MQxs7LEd5vSelzY6Mba1psk0nj4Q:f5z4Kzvx03DmpSg3BxgLEd56e+6wmukU
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6088

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarTstGt __vbaStrI2 _CIcos _adj_fptan __vbaStrI4 __vbaVarMove __vbaVarVargNofree __vbaFreeVar __vbaAryMove __vbaGosubReturn __vbaStrVarMove __vbaLenBstr __vbaEnd __vbaFreeVarList _adj_fdiv_m64 __vbaFreeObjList ord516 _adj_fprem1 __vbaRecAnsiToUni ord518 __vbaStrCat __vbaLsetFixstr __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 ord667 __vbaAryDestruct __vbaStrLike __vbaOnError ord595 _adj_fdiv_m16i _adj_fdivr_m16i __vbaStrFixstr _CIsin ord709 __vbaErase ord631 __vbaVarZero ord525 __vbaChkstk __vbaGosubFree __vbaFileClose EVENT_SINK_AddRef ord528 __vbaGenerateBoundsError ord529 __vbaGet3 __vbaStrCmp __vbaAryConstruct2 __vbaI2I4 __vbaObjVar DllFunctionCall __vbaRedimPreserve _adj_fpatan __vbaFixstrConstruct __vbaRedim __vbaRecUniToAnsi EVENT_SINK_Release ord600 __vbaUI1I2 _CIsqrt EVENT_SINK_QueryInterface __vbaUI1I4 __vbaExceptHandler __vbaInputFile __vbaPrintFile ord712 __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 __vbaGosub ord607 ord716 __vbaFPException __vbaInStrVar ord717 __vbaStrVarVal __vbaUbound __vbaVarCat ord537 ord644 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaNew2 ord648 __vbaR8Str __vbaVar2Vec __vbaInStr _adj_fdiv_m32i _adj_fdivr_m32i ord573 __vbaStrCopy __vbaI4Str __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord100 __vbaVarSetVar __vbaLateMemCall __vbaAryLock __vbaVarDup __vbaStrToAnsi __vbaFpI4 ord616 _CIatan ord618 __vbaUI1Str __vbaStrMove __vbaStrVarCopy _allmul _CItan __vbaAryUnlock _CIexp __vbaFreeObj __vbaFreeStr

Sharing

General

Malware Config

Signatures

File Explorer

f3e95567ee9ece690c044ea8447d91c7_JaffaCakes118

msvbvm60

generic