381a181f8e40fc7ddf8c2c15dc6d55a2_JaffaCakes118

General

Target
381a181f8e40fc7ddf8c2c15dc6d55a2_JaffaCakes118
Size 396KB
Sample240512-ec3rtsfa6s
SHA256 9f195d5b1ff0a5f0c07973d60624c89141c01c0d01d3f8091aa7626150ddf598
MD5 381a181f8e40fc7ddf8c2c15dc6d55a2
SHA1 f68755990d7dc1b8d346080b62dda8a8b0369cba
SHA512 18823d064ed0ef65921a7fe9d7cf5efb46672c0e71128a7ff6dace37d4575fa8a8d15068aa6180ba607d0458aeb68a903b849c90c8e296a7acadb4eb05de3482
SSDEEP 12288:qr+gCgRhGHQLJdTdQmX7PT8Iq2JrE2s0vbvd:qrBPYkE2sa1
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
381a181f8e40fc7ddf8c2c15dc6d55a2_JaffaCakes118

File Explorer

381a181f8e40fc7ddf8c2c15dc6d55a2_JaffaCakes118

.exe 396KB

381a181f8e40fc7ddf8c2c15dc6d55a2_JaffaCakes118

IMPHASH 560b4c1c585291bb477d736dfe65ee3f
SHA256 9f195d5b1ff0a5f0c07973d60624c89141c01c0d01d3f8091aa7626150ddf598
MD5 381a181f8e40fc7ddf8c2c15dc6d55a2
SHA1 f68755990d7dc1b8d346080b62dda8a8b0369cba
SHA512 18823d064ed0ef65921a7fe9d7cf5efb46672c0e71128a7ff6dace37d4575fa8a8d15068aa6180ba607d0458aeb68a903b849c90c8e296a7acadb4eb05de3482
SSDEEP 12288:qr+gCgRhGHQLJdTdQmX7PT8Iq2JrE2s0vbvd:qrBPYkE2sa1
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6328

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

_CIcos _adj_fptan __vbaStrI4 __vbaFreeVar __vbaAryMove __vbaStrVarMove __vbaLenBstr __vbaFreeVarList _adj_fdiv_m64 __vbaFreeObjList _adj_fprem1 __vbaResume __vbaStrCat __vbaSetSystemError __vbaHresultCheckObj __vbaLenVar _adj_fdiv_m32 __vbaAryDestruct __vbaExitProc ord593 ord594 __vbaOnError __vbaObjSet _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i __vbaVarIndexLoad ord598 _CIsin ord525 ord632 __vbaChkstk __vbaFileClose EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaGet3 __vbaVarTstEq __vbaAryConstruct2 __vbaR4Str __vbaObjVar DllFunctionCall __vbaVarLateMemSt _adj_fpatan __vbaRedim __vbaUI1ErrVar EVENT_SINK_Release _CIsqrt EVENT_SINK_QueryInterface __vbaUI1I4 __vbaExceptHandler ord711 ord606 _adj_fprem _adj_fdivr_m64 __vbaFPException ord717 __vbaUbound __vbaVarCat ord537 _CIlog __vbaErrorOverflow __vbaFileOpen ord570 __vbaNew2 __vbaVar2Vec _adj_fdiv_m32i _adj_fdivr_m32i ord573 __vbaStrCopy __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord685 ord100 __vbaLateMemCall __vbaAryLock __vbaVarDup __vbaVarLateMemCallLd __vbaFpI4 _CIatan __vbaStrMove __vbaStrVarCopy __vbaR8IntI4 _allmul __vbaLateIdSt _CItan __vbaFPInt __vbaAryUnlock _CIexp __vbaMidStmtBstr __vbaFreeStr __vbaFreeObj

Sharing

General

Malware Config

Signatures

File Explorer

381a181f8e40fc7ddf8c2c15dc6d55a2_JaffaCakes118

msvbvm60

generic