15465bec80cf938f607715e430706a54_JaffaCakes118

General

Target
15465bec80cf938f607715e430706a54_JaffaCakes118
Size 408KB
Sample240505-bdjhsscf62
SHA256 c287453d0df6418268060ee6694417b29d2f6643419b94212ade640bb47c5940
MD5 15465bec80cf938f607715e430706a54
SHA1 3e23469886dbd86864b8f11f148d62a80945a475
SHA512 deae0154b679607516d82dd19a8d66463e8fc282f7c656736a04ee905c2cac8ba4f834836e618d2c71d530129c44ca72c10710edf022b18a0505bb676fdf8d93
SSDEEP 6144:YZDhw/NG+86gQ/FGz8C0mDwwQYuzz3J7asoU:YZ9w/NVzXwQYuzz3JDl
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15465bec80cf938f607715e430706a54_JaffaCakes118

File Explorer

15465bec80cf938f607715e430706a54_JaffaCakes118

.exe 408KB

15465bec80cf938f607715e430706a54_JaffaCakes118

IMPHASH 1e6b456eed015cc8476b38993407e4c5
SHA256 c287453d0df6418268060ee6694417b29d2f6643419b94212ade640bb47c5940
MD5 15465bec80cf938f607715e430706a54
SHA1 3e23469886dbd86864b8f11f148d62a80945a475
SHA512 deae0154b679607516d82dd19a8d66463e8fc282f7c656736a04ee905c2cac8ba4f834836e618d2c71d530129c44ca72c10710edf022b18a0505bb676fdf8d93
SSDEEP 6144:YZDhw/NG+86gQ/FGz8C0mDwwQYuzz3J7asoU:YZ9w/NVzXwQYuzz3JDl
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

11248

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

oleaut32

SysReAllocString

kernel32

VirtualAlloc RtlMoveMemory WideCharToMultiByte

msvbvm60

__vbaVarSub __vbaVarTstGt __vbaStrI2 _CIcos _adj_fptan __vbaStrI4 __vbaVarMove __vbaVarVargNofree __vbaFreeVar __vbaAryMove __vbaLateIdCall __vbaLenBstr __vbaStrVarMove __vbaFreeVarList _adj_fdiv_m64 __vbaFpCDblR8 __vbaRaiseEvent __vbaFreeObjList ord516 ord517 __vbaStrErrVarCopy _adj_fprem1 __vbaRecAnsiToUni ord519 __vbaStrCat __vbaForEachCollAd __vbaLsetFixstr ord660 ord553 ord661 __vbaSetSystemError __vbaHresultCheckObj __vbaLenVar ord665 _adj_fdiv_m32 __vbaVarCmpGe __vbaAryDestruct __vbaLateMemSt __vbaExitProc ord300 __vbaI4Abs __vbaObjSet __vbaOnError _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord598 ord305 __vbaFpR4 ord599 ord306 __vbaStrFixstr __vbaForEachCollVar __vbaBoolVar __vbaBoolVarNull __vbaFpR8 __vbaVarTstLt __vbaRefVarAry _CIsin ord631 __vbaErase __vbaVarCmpGt ord632 __vbaChkstk EVENT_SINK_AddRef ord527 __vbaGenerateBoundsError __vbaStrCmp __vbaAryConstruct2 __vbaPrintObj __vbaI2I4 ord561 __vbaObjVar __vbaNextEachCollVar DllFunctionCall __vbaVarOr __vbaCastObjVar _adj_fpatan __vbaR4Var __vbaFixstrConstruct __vbaLateIdCallLd __vbaRedim __vbaStrR8 __vbaRecUniToAnsi EVENT_SINK_Release __vbaNew __vbaUI1I2 _CIsqrt __vbaVarAnd __vbaObjIs ord311 EVENT_SINK_QueryInterface __vbaExceptHandler ord313 __vbaStrToUnicode ord712 ord606 _adj_fprem _adj_fdivr_m64 __vbaFailedFriend ord608 __vbaVarCmpLe __vbaFPException __vbaInStrVar __vbaUbound __vbaStrVarVal ord534 __vbaVarCat __vbaCheckType __vbaI2Var __vbaLsetFixstrFree ord537 _CIlog __vbaErrorOverflow __vbaInStr __vbaNew2 __vbaVar2Vec __vbaR8Str _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaI4Str ord681 __vbaVarCmpLt __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord685 ord100 __vbaVarTstNe __vbaI4Var __vbaVarCmpEq ord610 __vbaVarAdd __vbaAryLock __vbaStrToAnsi __vbaVarDup __vbaFpI2 __vbaVarCopy __vbaFpI4 ord616 ord617 __vbaLateMemCallLd _CIatan __vbaStrMove ord618 __vbaCastObj __vbaStrVarCopy ord650 _allmul __vbaLateIdSt __vbaLenVarB _CItan __vbaNextEachCollAd __vbaFPInt __vbaAryUnlock _CIexp __vbaMidStmtBstr __vbaFreeObj __vbaFreeStr ord581

Sharing

General

Malware Config

Signatures

File Explorer

15465bec80cf938f607715e430706a54_JaffaCakes118

oleaut32

kernel32

msvbvm60

generic