82fa69b0a13f32305d13dc88c2f3fbed_JaffaCakes118

General

Target
82fa69b0a13f32305d13dc88c2f3fbed_JaffaCakes118
Size 277KB
Sample240530-emt8fadh2x
SHA256 1cc2b271332ad8f952216047ae755c9e93f85788074f343f9be11c0be6059e3f
MD5 82fa69b0a13f32305d13dc88c2f3fbed
SHA1 fd31c9d0fa60e5c621dea57c72aa144b31f4485f
SHA512 947893bbdc1c71df1c1adb0fba82e4983817ac1e9a14408f17ca36cb4f572a16433bd800a83a20fcf5c3b0920f8205c2efa67311b412b6a9cb87636db32d941f
SSDEEP 6144:yAkWz0ayMTumm6FMHjw0RfWNn1wx05gjGdxQD2L:9kUm6ywIfmn1wapQY
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
82fa69b0a13f32305d13dc88c2f3fbed_JaffaCakes118

File Explorer

82fa69b0a13f32305d13dc88c2f3fbed_JaffaCakes118

.exe 277KB

82fa69b0a13f32305d13dc88c2f3fbed_JaffaCakes118

IMPHASH 4982186a195463385217b14bd9481525
SHA256 1cc2b271332ad8f952216047ae755c9e93f85788074f343f9be11c0be6059e3f
MD5 82fa69b0a13f32305d13dc88c2f3fbed
SHA1 fd31c9d0fa60e5c621dea57c72aa144b31f4485f
SHA512 947893bbdc1c71df1c1adb0fba82e4983817ac1e9a14408f17ca36cb4f572a16433bd800a83a20fcf5c3b0920f8205c2efa67311b412b6a9cb87636db32d941f
SSDEEP 6144:yAkWz0ayMTumm6FMHjw0RfWNn1wx05gjGdxQD2L:9kUm6ywIfmn1wapQY
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5156

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

_CIcos _adj_fptan __vbaVarMove __vbaStrI4 __vbaAryMove __vbaFreeVar __vbaStrVarMove __vbaLenBstr __vbaFreeVarList _adj_fdiv_m64 ord516 _adj_fprem1 __vbaResume __vbaStrCat ord661 __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryDestruct __vbaExitProc __vbaOnError __vbaObjSet ord595 _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord598 __vbaVarIndexLoad _CIsin ord525 ord632 __vbaChkstk __vbaFileClose EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaGet3 __vbaAryConstruct2 __vbaVarTstEq __vbaObjVar DllFunctionCall __vbaVarLateMemSt __vbaLbound _adj_fpatan EVENT_SINK_Release ord600 __vbaUI1I2 _CIsqrt EVENT_SINK_QueryInterface __vbaUI1I4 __vbaExceptHandler ord711 _adj_fprem _adj_fdivr_m64 ord716 __vbaFPException ord717 __vbaUbound __vbaStrVarVal __vbaVarCat ord537 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaNew2 __vbaVar2Vec _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaI4Str __vbaFreeStrList _adj_fdivr_m32 __vbaR8Var _adj_fdiv_r ord685 ord100 __vbaVarTstNe __vbaVarSetVar ord611 __vbaAryLock __vbaVarDup __vbaFpI4 __vbaVarLateMemCallLd __vbaVarSetObjAddref __vbaLateMemCallLd _CIatan __vbaStrMove __vbaStrVarCopy _allmul _CItan ord546 __vbaAryUnlock _CIexp __vbaFreeObj __vbaFreeStr

Sharing

General

Malware Config

Signatures

File Explorer

82fa69b0a13f32305d13dc88c2f3fbed_JaffaCakes118

msvbvm60

generic