1d86467f83dc977dc89064b836d2b5d2_JaffaCakes118

General

Target
1d86467f83dc977dc89064b836d2b5d2_JaffaCakes118
Size 360KB
Sample240506-vpt88abc2t
SHA256 740146ce0427226e2b5e49b01b5a3b80176e9f5bd15cd61cf8291f2c59c1b43b
MD5 1d86467f83dc977dc89064b836d2b5d2
SHA1 854a8a0cc3a5fd29b85aa3279ac4b2f3829d6016
SHA512 ff5906a19eb39b16078ef92428b5d5b75ee3f9f5f949cb124f4cd4a8fec735634473a6415bfcda961dbc76446730f9dabab7bedcb7a5ab4c5a07f9016dafe50f
SSDEEP 6144:fI7kmNy3NyW7btm58icJp8DbxCuoAgUPL26GCFG:fI7kmNy3NyUmMJp8Db8jAVPL26GC8
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1d86467f83dc977dc89064b836d2b5d2_JaffaCakes118

File Explorer

1d86467f83dc977dc89064b836d2b5d2_JaffaCakes118

.exe 360KB

1d86467f83dc977dc89064b836d2b5d2_JaffaCakes118

IMPHASH b6a79a3bc71016bd803f495cd85cf154
SHA256 740146ce0427226e2b5e49b01b5a3b80176e9f5bd15cd61cf8291f2c59c1b43b
MD5 1d86467f83dc977dc89064b836d2b5d2
SHA1 854a8a0cc3a5fd29b85aa3279ac4b2f3829d6016
SHA512 ff5906a19eb39b16078ef92428b5d5b75ee3f9f5f949cb124f4cd4a8fec735634473a6415bfcda961dbc76446730f9dabab7bedcb7a5ab4c5a07f9016dafe50f
SSDEEP 6144:fI7kmNy3NyW7btm58icJp8DbxCuoAgUPL26GCFG:fI7kmNy3NyUmMJp8Db8jAVPL26GC8
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6696

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarTstGt _CIcos _adj_fptan __vbaVarMove __vbaFreeVar __vbaAryMove ord588 __vbaStrVarMove __vbaLenBstr __vbaFreeVarList _adj_fdiv_m64 __vbaFreeObjList _adj_fprem1 __vbaResume __vbaStrCat __vbaSetSystemError __vbaHresultCheckObj __vbaLenVar _adj_fdiv_m32 __vbaAryDestruct __vbaLateMemSt ord593 __vbaExitProc ord594 __vbaOnError ord595 __vbaObjSet _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i __vbaVarIndexLoad ord520 __vbaBoolVarNull _CIsin ord632 __vbaChkstk __vbaCyVar __vbaFileClose EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaGet3 __vbaStrCmp __vbaAryConstruct2 __vbaVarTstEq __vbaI2I4 __vbaObjVar ord561 __vbaPrintObj DllFunctionCall __vbaVarLateMemSt __vbaRedimPreserve _adj_fpatan __vbaStrR8 EVENT_SINK_Release __vbaUI1I2 _CIsqrt __vbaVarAnd EVENT_SINK_QueryInterface __vbaUI1I4 __vbaExceptHandler ord711 ord712 __vbaStrToUnicode ord606 _adj_fprem _adj_fdivr_m64 ord607 __vbaFPException ord717 __vbaStrVarVal __vbaVarCat __vbaI2Var _CIlog __vbaErrorOverflow __vbaFileOpen __vbaR8Str __vbaVar2Vec __vbaNew2 __vbaVarLateMemCallLdRf _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaFreeStrList _adj_fdivr_m32 __vbaPowerR8 _adj_fdiv_r ord685 ord578 ord100 __vbaI4Var __vbaVarCmpEq __vbaAryLock __vbaVarAdd __vbaLateMemCall __vbaVarDup __vbaStrToAnsi ord613 __vbaFpI2 ord616 __vbaVarLateMemCallLd __vbaVarCopy _CIatan __vbaStrMove __vbaStrVarCopy ord619 _allmul __vbaLateIdSt _CItan __vbaAryUnlock _CIexp __vbaFreeStr __vbaFreeObj ord581

Sharing

General

Malware Config

Signatures

File Explorer

1d86467f83dc977dc89064b836d2b5d2_JaffaCakes118

msvbvm60

generic