892070dc1b4c37a5be9de966e0e815e0_JaffaCakes118

General

Target
892070dc1b4c37a5be9de966e0e815e0_JaffaCakes118
Size 392KB
Sample240601-cx2ddsef91
SHA256 3961c447ef9ad90373dd2f41a964f4484044baf6aa5d6fe2fada359b50763302
MD5 892070dc1b4c37a5be9de966e0e815e0
SHA1 26955a242e19b15e31ad129b061c617ea7805c82
SHA512 6aa56a2556b4eb7a36ce51d2f1aff57317b8ae87b9eb78168d2c6c093bcaa1503599112e7400adeda7d5af7c7623ff5a9031f27f9447584c4aa5afbd0f1a17d1
SSDEEP 3072:2tvl0Wi4zKwRz2NzzMQZNIm/us/XEuSwZtnVxuW23VXC3BnKVXTLQXXrfF+DyfoJ:+zGJ/jNSgV4WQVXCdXrf+WeH6xx
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
892070dc1b4c37a5be9de966e0e815e0_JaffaCakes118

File Explorer

892070dc1b4c37a5be9de966e0e815e0_JaffaCakes118

.exe 392KB

892070dc1b4c37a5be9de966e0e815e0_JaffaCakes118

IMPHASH 9f9d3a86969cf0760e2a7acb763731ce
SHA256 3961c447ef9ad90373dd2f41a964f4484044baf6aa5d6fe2fada359b50763302
MD5 892070dc1b4c37a5be9de966e0e815e0
SHA1 26955a242e19b15e31ad129b061c617ea7805c82
SHA512 6aa56a2556b4eb7a36ce51d2f1aff57317b8ae87b9eb78168d2c6c093bcaa1503599112e7400adeda7d5af7c7623ff5a9031f27f9447584c4aa5afbd0f1a17d1
SSDEEP 3072:2tvl0Wi4zKwRz2NzzMQZNIm/us/XEuSwZtnVxuW23VXC3BnKVXTLQXXrfF+DyfoJ:+zGJ/jNSgV4WQVXCdXrf+WeH6xx
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5604

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

_CIcos _adj_fptan ord585 __vbaVarMove __vbaFreeVar __vbaLenBstr ord696 __vbaFreeVarList _adj_fdiv_m64 ord514 __vbaFreeObjList _adj_fprem1 __vbaStrCat __vbaSetSystemError ord662 __vbaHresultCheckObj ord557 ord664 _adj_fdiv_m32 __vbaAryVar __vbaAryDestruct ord669 __vbaLateMemSt __vbaExitProc __vbaObjSet __vbaOnError ord596 _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord598 ord521 ord706 ord522 __vbaFpR8 ord708 _CIsin ord632 __vbaChkstk __vbaGosubFree ord633 EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaStrCmp __vbaAryConstruct2 __vbaVarTstEq __vbaObjVar DllFunctionCall __vbaVarLateMemSt ord671 ord673 _adj_fpatan __vbaLateIdCallLd ord676 ord677 EVENT_SINK_Release ord600 _CIsqrt EVENT_SINK_QueryInterface __vbaExceptHandler _adj_fprem _adj_fdivr_m64 __vbaGosub ord530 ord608 __vbaFPException __vbaStrVarVal ord534 _CIlog ord646 __vbaErrorOverflow ord647 ord648 __vbaNew2 _adj_fdiv_m32i _adj_fdivr_m32i ord573 __vbaVarSetObj __vbaI4Str __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord100 __vbaVarTstNe __vbaI4Var ord610 __vbaVarAdd __vbaLateMemCall __vbaVarDup ord614 __vbaFpI4 ord616 __vbaLateMemCallLd _CIatan __vbaAryCopy __vbaStrMove _allmul _CItan _CIexp __vbaFreeStr __vbaFreeObj ord581

Sharing

General

Malware Config

Signatures

File Explorer

892070dc1b4c37a5be9de966e0e815e0_JaffaCakes118

msvbvm60

generic