a1cd46cf4f7081369632508ffde19f8f_JaffaCakes118

General

Target
a1cd46cf4f7081369632508ffde19f8f_JaffaCakes118
Size 780KB
Sample240612-xc32pszalm
SHA256 dcb148261d6e0c2b67409959d649627ff37b21f35bbe3828a4c8f3c4e982210e
MD5 a1cd46cf4f7081369632508ffde19f8f
SHA1 2ce74c93e81735b25760704a3831172ff707a6c2
SHA512 6c88089663555b0870838fbb57e4102ba1ea9a0562c3276e85c912a37960b38254e1599ecc26ce76a800274e1ea76fd18ab814ec29880d80647d1c13fb9b87dc
SSDEEP 6144:1YSIs3Lf1GXW0pAX89Sz/h0NEBcScDHo:CC90aXrzKNEBIs
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1cd46cf4f7081369632508ffde19f8f_JaffaCakes118

File Explorer

a1cd46cf4f7081369632508ffde19f8f_JaffaCakes118

.exe 780KB

a1cd46cf4f7081369632508ffde19f8f_JaffaCakes118

IMPHASH 3effb5cabd23ba0c31ca2a9e3c52883d
SHA256 dcb148261d6e0c2b67409959d649627ff37b21f35bbe3828a4c8f3c4e982210e
MD5 a1cd46cf4f7081369632508ffde19f8f
SHA1 2ce74c93e81735b25760704a3831172ff707a6c2
SHA512 6c88089663555b0870838fbb57e4102ba1ea9a0562c3276e85c912a37960b38254e1599ecc26ce76a800274e1ea76fd18ab814ec29880d80647d1c13fb9b87dc
SSDEEP 6144:1YSIs3Lf1GXW0pAX89Sz/h0NEBcScDHo:CC90aXrzKNEBIs
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6388

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

_CIcos _adj_fptan __vbaVarMove __vbaFreeVar __vbaStrVarMove __vbaLenBstr ord695 __vbaFreeVarList __vbaVarIdiv __vbaEnd _adj_fdiv_m64 ord698 __vbaR8Sgn _adj_fprem1 __vbaLsetFixstr ord660 __vbaSetSystemError __vbaHresultCheckObj __vbaLenVar _adj_fdiv_m32 __vbaOnError _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord521 ord523 __vbaRefVarAry _CIsin ord632 __vbaChkstk EVENT_SINK_AddRef __vbaVarTstEq __vbaObjVar DllFunctionCall __vbaLbound _adj_fpatan __vbaLateIdCallLd ord678 EVENT_SINK_Release __vbaUI1I2 _CIsqrt EVENT_SINK_QueryInterface __vbaExceptHandler __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 __vbaFPException __vbaStrVarVal __vbaUbound __vbaVarCat ord536 _CIlog ord646 __vbaErrorOverflow __vbaNew2 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord100 __vbaVarTstNe __vbaI4Var ord610 __vbaLateMemCall __vbaStrToAnsi __vbaStrComp __vbaVarCopy __vbaFpI4 ord616 __vbaLateMemCallLd __vbaVarSetObjAddref _CIatan __vbaStrMove ord540 __vbaR8IntI4 _allmul _CItan ord546 _CIexp __vbaFreeStr __vbaFreeObj

Sharing

General

Malware Config

Signatures

File Explorer

a1cd46cf4f7081369632508ffde19f8f_JaffaCakes118

msvbvm60

generic