3ac58fed98977e914b473b1fc2369e1c_JaffaCakes118

General

Target
3ac58fed98977e914b473b1fc2369e1c_JaffaCakes118
Size 20KB
Sample240512-sppydsfa98
SHA256 6105764f402772bf64dc7a9eaefaf14078e278ebf689c9e5003c249315a4e006
MD5 3ac58fed98977e914b473b1fc2369e1c
SHA1 9cd519403f4b82f41dfa3c776294f89571fb1a11
SHA512 39cdcc30af8f4beeefe03c6d2c13198aaf93a4a94a931b672697864ea882dbabf9c978a10729715ea8254f7376b44d96922ba96e5a8e563b56302a10e57f340b
SSDEEP 384:eCrOXbkNOgz+YZjLN/NG6Xc4OIHADcEZPzncKoQalIJ93ZjIAajriHmNkvrZyL6A:etXbSD+YhzrXgl7VoQauJVCAIriHmc8r
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/UPS 3422290420.exe

File Explorer

3ac58fed98977e914b473b1fc2369e1c_JaffaCakes118

.7z 20KB
UPS 3422290420.exe

.exe 92KB

3ac58fed98977e914b473b1fc2369e1c_JaffaCakes118

SHA256 6105764f402772bf64dc7a9eaefaf14078e278ebf689c9e5003c249315a4e006
MD5 3ac58fed98977e914b473b1fc2369e1c
SHA1 9cd519403f4b82f41dfa3c776294f89571fb1a11
SHA512 39cdcc30af8f4beeefe03c6d2c13198aaf93a4a94a931b672697864ea882dbabf9c978a10729715ea8254f7376b44d96922ba96e5a8e563b56302a10e57f340b
SSDEEP 384:eCrOXbkNOgz+YZjLN/NG6Xc4OIHADcEZPzncKoQalIJ93ZjIAajriHmNkvrZyL6A:etXbSD+YhzrXgl7VoQauJVCAIriHmc8r
MD5 SHA1 SHA512 SSDEEP

UPS 3422290420.exe

IMPHASH 13ec0a901230159f4fc2b19f11335a5f
SHA256 2d1e3bc96b4698c535b9f3528c016a83a04a20cc66b25e0d7f2154a7855ca068
MD5 44c0749d873e7827808a4094fa35ddc5
SHA1 bac4c1d7228f4531e6ab1b71390968b9ff178545
SHA512 50f36022b7aa917afa4b97cacc292de5acf40477ed18ada21aafcb6b72c20df4cf8ec66836a62d9843934b3d145b761ad530d8e99fd5af4d588b6ed5d3bb0722
SSDEEP 768:DygOknzV0Ib+kKHuW+FWkZBH9lFMhRzhUHCeeOjR7bJ:DvtVfSkKHuW+BBH9lGhyrVB
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5524

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

_CIcos _adj_fptan __vbaVarMove __vbaFreeVar __vbaStrVarMove __vbaFreeVarList _adj_fdiv_m64 ord698 ord512 ord513 __vbaFreeObjList _adj_fprem1 __vbaStrCat ord554 __vbaHresultCheckObj ord662 ord664 ord558 _adj_fdiv_m32 ord666 ord667 __vbaAryDestruct ord591 ord593 __vbaObjSet _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord704 __vbaCyStr ord521 __vbaFPFix _CIsin ord524 ord709 ord525 __vbaChkstk EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaStrCmp __vbaVarTstEq __vbaAryConstruct2 __vbaObjVar ord562 ord671 __vbaCastObjVar _adj_fpatan ord678 EVENT_SINK_Release ord600 _CIsqrt EVENT_SINK_QueryInterface __vbaFpCmpCy __vbaExceptHandler ord713 _adj_fprem _adj_fdivr_m64 ord530 ord531 __vbaFPException ord717 __vbaStrVarVal ord534 ord645 _CIlog __vbaFileOpen __vbaNew2 __vbaR8Str _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaVarSetObj __vbaI4Str __vbaFreeStrList _adj_fdivr_m32 ord684 _adj_fdiv_r ord685 ord100 __vbaVarTstNe ord689 ord610 __vbaVarAdd __vbaLateMemCall __vbaVarDup __vbaStrComp ord612 ord613 ord615 __vbaFpI4 __vbaVarLateMemCallLd _CIatan __vbaStrMove ord618 ord542 _allmul _CItan _CIexp __vbaFreeStr __vbaFreeObj ord580 ord581

Sharing

General

Malware Config

Signatures

File Explorer

3ac58fed98977e914b473b1fc2369e1c_JaffaCakes118

UPS 3422290420.exe

msvbvm60

generic