b45e57055a3c8fb5c134e18cccde191e_JaffaCakes118

General

Target
b45e57055a3c8fb5c134e18cccde191e_JaffaCakes118
Size 120KB
Sample240616-thbmvstdrl
SHA256 516182949c58c110820c3dc268cabbe715057a49d887e96db47f8b4fc088b8d8
MD5 b45e57055a3c8fb5c134e18cccde191e
SHA1 663cef4b00032f0769a08ddc7ea0f6193b042dfe
SHA512 9e3ffc97863962834e03206f4928af84deaf86592285c6ed601361f179ed0eeb30e20ff64670f6c053e80c88ef3eabf337fd6fc7b29162301185f295d91e6b96
SSDEEP 1536:EVZOoyDUU8i2TXGdqH7VGwRVOFO22bDZ6xMX+U713/l0g6:EV0Us2SdqBGwRVYOjZd+a/J6
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b45e57055a3c8fb5c134e18cccde191e_JaffaCakes118

File Explorer

b45e57055a3c8fb5c134e18cccde191e_JaffaCakes118

.exe 120KB

b45e57055a3c8fb5c134e18cccde191e_JaffaCakes118

IMPHASH 555acf0a2462b3a2309e507bcbf1aa9d
SHA256 516182949c58c110820c3dc268cabbe715057a49d887e96db47f8b4fc088b8d8
MD5 b45e57055a3c8fb5c134e18cccde191e
SHA1 663cef4b00032f0769a08ddc7ea0f6193b042dfe
SHA512 9e3ffc97863962834e03206f4928af84deaf86592285c6ed601361f179ed0eeb30e20ff64670f6c053e80c88ef3eabf337fd6fc7b29162301185f295d91e6b96
SSDEEP 1536:EVZOoyDUU8i2TXGdqH7VGwRVOFO22bDZ6xMX+U713/l0g6:EV0Us2SdqBGwRVYOjZd+a/J6
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5708

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

ord583 _CIcos _adj_fptan __vbaStrI4 __vbaVarMove ord692 ord585 __vbaFreeVar __vbaLenBstr __vbaStrVarMove ord696 __vbaFreeVarList _adj_fdiv_m64 ord698 ord516 _adj_fprem1 ord519 ord629 __vbaHresultCheckObj ord557 _adj_fdiv_m32 ord667 __vbaAryDestruct __vbaOnError __vbaObjSet _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i __vbaFPFix __vbaFpR8 _CIsin ord524 ord709 ord525 __vbaChkstk ord526 EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaStrCmp __vbaVarTstEq __vbaAryConstruct2 __vbaObjVar ord562 _adj_fpatan __vbaLateIdCallLd ord676 __vbaRedim ord678 EVENT_SINK_Release __vbaUI1I2 _CIsqrt EVENT_SINK_QueryInterface __vbaExceptHandler ord606 _adj_fprem _adj_fdivr_m64 ord714 ord608 ord716 __vbaFPException ord717 ord536 ord538 _CIlog ord647 __vbaNew2 __vbaR8Str _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy ord573 __vbaI4Str ord574 __vbaFreeStrList __vbaDerefAry1 _adj_fdivr_m32 ord684 _adj_fdiv_r ord685 ord100 __vbaI4Var ord611 __vbaVarDup ord612 __vbaStrComp _CIatan __vbaStrMove _allmul ord544 ord652 _CItan _CIexp __vbaFreeStr __vbaFreeObj ord581

Sharing

General

Malware Config

Signatures

File Explorer

b45e57055a3c8fb5c134e18cccde191e_JaffaCakes118

msvbvm60

generic