108156ae3609706003c6cefd6335c554_JaffaCakes118

General

Target
108156ae3609706003c6cefd6335c554_JaffaCakes118
Size 368KB
Sample240503-pjadzagc36
SHA256 535d92c4a194c64723fdf9b7279f033085c0861d93b9f43747320759fd172afc
MD5 108156ae3609706003c6cefd6335c554
SHA1 9ad9e65ee4407162beb14eb33859ffc77451e7fb
SHA512 72ec03a163d291c9fc8e73689e63e0b55aa78d2c97e83b2187d581592d09a7ab361004ce72ee9a8792dee6c36a4a6ffda80391106afc2a1e7733653f813b247f
SSDEEP 3072:aFFyrH+tfkhzjvRYkYjvnNfugsIN23+q7cuZv2kjgyoWOuClDfujpITpVxzApTld:aiHGIRYtvZughqLFeuwi0pVaY
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
108156ae3609706003c6cefd6335c554_JaffaCakes118

File Explorer

108156ae3609706003c6cefd6335c554_JaffaCakes118

.exe 368KB

108156ae3609706003c6cefd6335c554_JaffaCakes118

IMPHASH b9d5e0890a3e2af02e6aa453e47ed821
SHA256 535d92c4a194c64723fdf9b7279f033085c0861d93b9f43747320759fd172afc
MD5 108156ae3609706003c6cefd6335c554
SHA1 9ad9e65ee4407162beb14eb33859ffc77451e7fb
SHA512 72ec03a163d291c9fc8e73689e63e0b55aa78d2c97e83b2187d581592d09a7ab361004ce72ee9a8792dee6c36a4a6ffda80391106afc2a1e7733653f813b247f
SSDEEP 3072:aFFyrH+tfkhzjvRYkYjvnNfugsIN23+q7cuZv2kjgyoWOuClDfujpITpVxzApTld:aiHGIRYtvZughqLFeuwi0pVaY
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5176

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

_CIcos _adj_fptan __vbaVarMove ord692 __vbaFreeVar __vbaStrVarMove __vbaLenBstr ord589 __vbaFreeVarList _adj_fdiv_m64 __vbaFreeObjList _adj_fprem1 ord519 __vbaStrCat ord552 ord661 __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 ord666 ord669 __vbaExitProc ord593 __vbaObjSet __vbaOnError _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord704 ord705 _CIsin __vbaChkstk __vbaGosubFree EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaStrCmp DllFunctionCall ord671 _adj_fpatan __vbaLateIdCallLd EVENT_SINK_Release ord600 _CIsqrt EVENT_SINK_QueryInterface __vbaExceptHandler _adj_fprem _adj_fdivr_m64 __vbaGosub ord608 ord609 ord716 __vbaFPException __vbaStrVarVal ord534 ord535 ord645 _CIlog __vbaErrorOverflow ord647 __vbaNew2 __vbaR8Str ord571 _adj_fdiv_m32i _adj_fdivr_m32i __vbaVarSetObj __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord100 __vbaVarTstNe __vbaI4Var ord610 ord611 __vbaLateMemCall __vbaVarDup ord613 ord614 __vbaFpI4 _CIatan ord540 __vbaUI1Str __vbaStrMove ord541 _allmul ord652 _CItan _CIexp __vbaFreeObj __vbaFreeStr

Sharing

General

Malware Config

Signatures

File Explorer

108156ae3609706003c6cefd6335c554_JaffaCakes118

msvbvm60

generic