ad53a021240c3ca492fc17b70a07f903_JaffaCakes118

General

Target
ad53a021240c3ca492fc17b70a07f903_JaffaCakes118
Size 816KB
Sample240615-h94beascme
SHA256 acce79d4cb1c1968e0db0f8e46a0731c48b309c8a2ded437f0067a4547859185
MD5 ad53a021240c3ca492fc17b70a07f903
SHA1 40cc56db2efcb386b38dd585112fef0145ed8cd4
SHA512 4e8f87f756bf7f89b28121ca2d9bba8c54dd66ee7070e336695f6f7fd0a82e083b427154c92426e029407c119f59997aa9c148ab069fbd5dc8841d496636a2a0
SSDEEP 12288:tyJoj7/HdCmQp4j8bxhevPWhc7n/p7XChpl9ZN0raSbwMKIt0p0MI8nntzbhzEeY:tN0emy3eUnxQNSFWfqSntzbhzEe1yib
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad53a021240c3ca492fc17b70a07f903_JaffaCakes118

File Explorer

ad53a021240c3ca492fc17b70a07f903_JaffaCakes118

.exe 816KB

ad53a021240c3ca492fc17b70a07f903_JaffaCakes118

IMPHASH 4a65805506215c2232ff099de510eb18
SHA256 acce79d4cb1c1968e0db0f8e46a0731c48b309c8a2ded437f0067a4547859185
MD5 ad53a021240c3ca492fc17b70a07f903
SHA1 40cc56db2efcb386b38dd585112fef0145ed8cd4
SHA512 4e8f87f756bf7f89b28121ca2d9bba8c54dd66ee7070e336695f6f7fd0a82e083b427154c92426e029407c119f59997aa9c148ab069fbd5dc8841d496636a2a0
SSDEEP 12288:tyJoj7/HdCmQp4j8bxhevPWhc7n/p7XChpl9ZN0raSbwMKIt0p0MI8nntzbhzEeY:tN0emy3eUnxQNSFWfqSntzbhzEe1yib
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5476

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

_CIcos _adj_fptan __vbaVarMove ord692 __vbaFreeVar __vbaStrVarMove __vbaFreeVarList ord697 _adj_fdiv_m64 ord514 __vbaFreeObjList ord516 ord517 _adj_fprem1 ord518 __vbaStrCat ord552 ord660 ord554 ord662 __vbaHresultCheckObj __vbaLenBstrB ord556 ord557 _adj_fdiv_m32 ord666 __vbaAryDestruct __vbaLateMemSt ord591 ord593 __vbaObjSet ord595 _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord598 ord521 ord707 ord522 __vbaFpR8 _CIsin ord631 ord525 __vbaChkstk ord526 EVENT_SINK_AddRef ord527 __vbaStrCmp ord529 __vbaVarTstEq __vbaObjVar ord561 DllFunctionCall ord670 ord671 _adj_fpatan __vbaR4Var ord569 ord677 EVENT_SINK_Release ord679 ord600 _CIsqrt EVENT_SINK_QueryInterface __vbaExceptHandler ord713 _adj_fprem _adj_fdivr_m64 ord714 ord607 ord609 ord716 __vbaFPException ord534 __vbaDateVar ord645 _CIlog ord646 __vbaNew2 __vbaR8Str _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy ord680 ord573 __vbaI4Str __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord685 ord100 __vbaVarTstNe ord687 __vbaI4Var ord689 ord610 ord611 __vbaInStrB __vbaVarAdd __vbaLateMemCall __vbaVarDup ord612 ord613 ord616 __vbaFpI4 __vbaLateMemCallLd _CIatan __vbaStrMove ord543 _allmul ord652 _CItan ord546 __vbaFPInt _CIexp __vbaFreeStr __vbaFreeObj ord581

Sharing

General

Malware Config

Signatures

File Explorer

ad53a021240c3ca492fc17b70a07f903_JaffaCakes118

msvbvm60

generic