a1e15c0e4490e83beed5494ad8047f21_JaffaCakes118

General

Target
a1e15c0e4490e83beed5494ad8047f21_JaffaCakes118
Size 584KB
Sample240612-xpc12swdma
SHA256 b819ead51a3dede0ab5459c5972a08be104ed231c745ed4e0e5017da81527462
MD5 a1e15c0e4490e83beed5494ad8047f21
SHA1 1c9748347151d46b103e974f3bc02b16dbb3372c
SHA512 3a0380e731477acb8ab21768f949270076fc292e53c60c0d747141127394a37ff5682e53803b8e6863f7186ebc9622173767fa68d018aed179beeef97a595877
SSDEEP 12288:pKtz6TCAYjjrVQdl9DKlTLhein9b+EKLce0plZ/:gsT/YjjSDM9Sce0pD
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1e15c0e4490e83beed5494ad8047f21_JaffaCakes118

File Explorer

a1e15c0e4490e83beed5494ad8047f21_JaffaCakes118

.exe 584KB

a1e15c0e4490e83beed5494ad8047f21_JaffaCakes118

IMPHASH 63a8f90a2d2c877e031dced9e4c4d2aa
SHA256 b819ead51a3dede0ab5459c5972a08be104ed231c745ed4e0e5017da81527462
MD5 a1e15c0e4490e83beed5494ad8047f21
SHA1 1c9748347151d46b103e974f3bc02b16dbb3372c
SHA512 3a0380e731477acb8ab21768f949270076fc292e53c60c0d747141127394a37ff5682e53803b8e6863f7186ebc9622173767fa68d018aed179beeef97a595877
SSDEEP 12288:pKtz6TCAYjjrVQdl9DKlTLhein9b+EKLce0plZ/:gsT/YjjSDM9Sce0pD
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5332

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

_CIcos _adj_fptan __vbaHresultCheck __vbaVarMove __vbaFreeVar __vbaStrVarMove __vbaFreeVarList __vbaEnd _adj_fdiv_m64 __vbaFreeObjList ord517 _adj_fprem1 __vbaRecAnsiToUni __vbaStrCat ord629 ord660 ord554 __vbaSetSystemError __vbaHresultCheckObj ord662 ord557 __vbaLenVar _adj_fdiv_m32 ord559 ord667 ord668 __vbaAryDestruct ord591 __vbaLateMemSt __vbaFileCloseAll __vbaObjSet ord595 ord596 _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord703 ord598 __vbaFPFix ord707 _CIsin __vbaErase ord632 ord525 __vbaChkstk ord633 EVENT_SINK_AddRef __vbaStrCmp __vbaAryConstruct2 __vbaObjVar DllFunctionCall ord564 __vbaCastObjVar _adj_fpatan ord674 ord569 ord676 __vbaRedim __vbaRecUniToAnsi EVENT_SINK_Release _CIsqrt EVENT_SINK_QueryInterface __vbaExceptHandler __vbaStrToUnicode ord712 _adj_fprem _adj_fdivr_m64 __vbaVarErrI4 ord714 ord609 __vbaFPException ord532 __vbaVarCat ord537 _CIlog __vbaR8Str __vbaNew2 _adj_fdiv_m32i _adj_fdivr_m32i ord573 __vbaStrCopy __vbaVarSetObj __vbaI4Str ord682 __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord100 __vbaVarTstNe __vbaI4Var __vbaVarCmpEq ord610 __vbaVarAdd __vbaVarDup ord612 __vbaStrToAnsi __vbaVarLateMemCallLd __vbaFpI4 __vbaVarCopy __vbaLateMemCallLd _CIatan __vbaStrMove _allmul ord651 ord652 _CItan ord547 _CIexp __vbaFreeObj __vbaFreeStr

Sharing

General

Malware Config

Signatures

File Explorer

a1e15c0e4490e83beed5494ad8047f21_JaffaCakes118

msvbvm60

generic