a7646109d58311c20db8e2167eb1fbf4_JaffaCakes118

General

Target
a7646109d58311c20db8e2167eb1fbf4_JaffaCakes118
Size 384KB
Sample240614-a6mv9ayblc
SHA256 ddc910b0ad32a30ad4b0d98da9ff8d46e60d674ec66891f200a8dad6339d4f58
MD5 a7646109d58311c20db8e2167eb1fbf4
SHA1 615cda582a19f6abc8634ab2744358c40f25482e
SHA512 00dc69cfc1fae92469d6687d158441ebe2f80b823c5b74d4d8a582dfa32e47b037f28653eaf32c61f6bffb19ebd4fe30d278fdb80820a1daf87498aa3fbb8cf5
SSDEEP 6144:PaZ8OpEHPkwCmpk38F2XkHqpBg9DXpC6kaEcZuXa2a66:P5HMwrpabXkKpADXp+aEci41
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a7646109d58311c20db8e2167eb1fbf4_JaffaCakes118

File Explorer

a7646109d58311c20db8e2167eb1fbf4_JaffaCakes118

.exe 384KB

a7646109d58311c20db8e2167eb1fbf4_JaffaCakes118

IMPHASH e233fa73e53e6d1e940c99fb8a914d14
SHA256 ddc910b0ad32a30ad4b0d98da9ff8d46e60d674ec66891f200a8dad6339d4f58
MD5 a7646109d58311c20db8e2167eb1fbf4
SHA1 615cda582a19f6abc8634ab2744358c40f25482e
SHA512 00dc69cfc1fae92469d6687d158441ebe2f80b823c5b74d4d8a582dfa32e47b037f28653eaf32c61f6bffb19ebd4fe30d278fdb80820a1daf87498aa3fbb8cf5
SSDEEP 6144:PaZ8OpEHPkwCmpk38F2XkHqpBg9DXpC6kaEcZuXa2a66:P5HMwrpabXkKpADXp+aEci41
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5784

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

oleaut32

SysReAllocString SysAllocStringLen

kernel32

GetProcAddress RtlMoveMemory

msvbvm60

EVENT_SINK_GetIDsOfNames _CIcos _adj_fptan __vbaVarMove __vbaVarVargNofree ord587 __vbaAryMove __vbaFreeVar __vbaLateIdCall __vbaLenBstr __vbaFreeVarList _adj_fdiv_m64 EVENT_SINK_Invoke __vbaRaiseEvent __vbaFreeObjList ord516 _adj_fprem1 __vbaStrCat __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 Zombie_GetTypeInfo __vbaAryDestruct __vbaExitProc __vbaOnError ord595 __vbaObjSet _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i __vbaFpR4 __vbaBoolVar _CIsin ord631 ord632 __vbaChkstk EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaStrCmp __vbaVarTstEq __vbaObjVar __vbaI2I4 DllFunctionCall __vbaCastObjVar __vbaLbound _adj_fpatan __vbaR4Var __vbaLateIdCallLd Zombie_GetTypeInfoCount EVENT_SINK_Release __vbaNew __vbaUI1I2 _CIsqrt EVENT_SINK_QueryInterface __vbaUI1I4 __vbaExceptHandler _adj_fprem _adj_fdivr_m64 __vbaFPException ord319 __vbaUbound __vbaStrVarVal ord534 __vbaI2Var ord644 _CIlog __vbaErrorOverflow __vbaVar2Vec __vbaNew2 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaFreeStrList _adj_fdivr_m32 __vbaR8Var _adj_fdiv_r ord685 ord100 __vbaI4Var __vbaAryLock ord320 __vbaVarDup ord321 __vbaFpI2 _CIatan __vbaStrMove _allmul __vbaLateIdSt _CItan __vbaAryUnlock _CIexp __vbaFreeObj __vbaFreeStr

Sharing

General

Malware Config

Signatures

File Explorer

a7646109d58311c20db8e2167eb1fbf4_JaffaCakes118

oleaut32

kernel32

msvbvm60

generic