081a4d1cbc3c5132c0bc7c2fe9878d7c_JaffaCakes118

General

Target
081a4d1cbc3c5132c0bc7c2fe9878d7c_JaffaCakes118
Size 468KB
Sample240429-tycvvsfb67
SHA256 db1bcddd826809aea123d5215164746491c6af795bfe95e94b40e982c2d46930
MD5 081a4d1cbc3c5132c0bc7c2fe9878d7c
SHA1 486086fac1e1d9231d97d792f4ef381e66e88e2c
SHA512 eeb96182e4f7bb1c4293ba7e4a483d868ab783053971b2ada0b063059f2c2dcc91fe762d0fcf77ac17d95d68fcb078c5a855b70a65db69513b6d68862b1d7dd7
SSDEEP 6144:BRo8wwe9YCOnvHIOOpDTUyEYb/HJWQ8LOXwuAmLOZGtxcQaWtDoXyEjdARQ9b87x:B68ww/H8UypdwmLttxVuXyOzb8JeGmLw
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
081a4d1cbc3c5132c0bc7c2fe9878d7c_JaffaCakes118

File Explorer

081a4d1cbc3c5132c0bc7c2fe9878d7c_JaffaCakes118

.exe 468KB

081a4d1cbc3c5132c0bc7c2fe9878d7c_JaffaCakes118

IMPHASH eac14a3b805ec7ce3f4759f2fcfb40c4
SHA256 db1bcddd826809aea123d5215164746491c6af795bfe95e94b40e982c2d46930
MD5 081a4d1cbc3c5132c0bc7c2fe9878d7c
SHA1 486086fac1e1d9231d97d792f4ef381e66e88e2c
SHA512 eeb96182e4f7bb1c4293ba7e4a483d868ab783053971b2ada0b063059f2c2dcc91fe762d0fcf77ac17d95d68fcb078c5a855b70a65db69513b6d68862b1d7dd7
SSDEEP 6144:BRo8wwe9YCOnvHIOOpDTUyEYb/HJWQ8LOXwuAmLOZGtxcQaWtDoXyEjdARQ9b87x:B68ww/H8UypdwmLttxVuXyOzb8JeGmLw
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

8744

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

EVENT_SINK_GetIDsOfNames __vbaVarSub _CIcos _adj_fptan __vbaVarMove __vbaStrI4 __vbaVarVargNofree __vbaAryMove __vbaFreeVar __vbaLenBstr __vbaLateIdCall __vbaStrVarMove __vbaFreeVarList _adj_fdiv_m64 ord698 EVENT_SINK_Invoke __vbaRaiseEvent __vbaFreeObjList _adj_fprem1 __vbaResume __vbaStrCat ord660 ord661 __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 Zombie_GetTypeInfo __vbaAryDestruct __vbaExitProc ord595 __vbaObjSet __vbaOnError _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord598 ord520 __vbaBoolVar __vbaRefVarAry __vbaVarTstLt __vbaBoolVarNull _CIsin ord631 __vbaErase __vbaChkstk __vbaCyVar EVENT_SINK_AddRef ord528 __vbaStrCmp __vbaVarTstEq DllFunctionCall __vbaVarOr __vbaCastObjVar _adj_fpatan __vbaR4Var __vbaLateIdCallLd Zombie_GetTypeInfoCount __vbaRedim EVENT_SINK_Release __vbaNew _CIsqrt EVENT_SINK_QueryInterface __vbaExceptHandler __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 ord607 __vbaFailedFriend __vbaI2Str ord608 __vbaFPException ord319 __vbaUbound __vbaStrVarVal __vbaVarCat ord535 __vbaI2Var ord537 ord644 ord645 _CIlog __vbaInStr __vbaR8Str __vbaVar2Vec __vbaNew2 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaI4Str __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord685 ord100 __vbaVarTstNe ord579 __vbaI4Var ord611 __vbaLateMemCall __vbaVarAdd __vbaAryLock ord320 __vbaStrToAnsi __vbaVarDup ord321 ord613 __vbaFpI2 __vbaFpI4 ord617 __vbaLateMemCallLd _CIatan __vbaStrMove ord619 _allmul __vbaLateIdSt _CItan ord546 __vbaAryUnlock __vbaFPInt _CIexp __vbaI4ErrVar __vbaFreeObj __vbaFreeStr ord581

Sharing

General

Malware Config

Signatures

File Explorer

081a4d1cbc3c5132c0bc7c2fe9878d7c_JaffaCakes118

msvbvm60

generic