03d7f137c99ff295a14810c82ac80788_JaffaCakes118

General

Target
03d7f137c99ff295a14810c82ac80788_JaffaCakes118
Size 184KB
Sample240620-hsld9svelc
SHA256 a30ab76be17ae6075aa68927d762209b3633873bfc2d36258f6a0c577234f82b
MD5 03d7f137c99ff295a14810c82ac80788
SHA1 4fdc8fcf59b86febe7b8c78cc9c3ec1e9a9730fe
SHA512 4501674af09b76735fe842c9f6f6e26aa19961c6d18de572a52e31d9ed12db1e000044c10fc7e6471d8ad9f953919eb7ce098466cfc5333a7f13d66431d20022
SSDEEP 3072:tf5QSk6r5LOIGLdaHKZV20TGyfs6YhN9M3NT4Y3Srz91HruDqdqdzKEyRiv:tfmEqZ/GyfigaY3SF1Hegqd4Ra
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03d7f137c99ff295a14810c82ac80788_JaffaCakes118

File Explorer

03d7f137c99ff295a14810c82ac80788_JaffaCakes118

.exe 184KB

03d7f137c99ff295a14810c82ac80788_JaffaCakes118

IMPHASH 2bd811f344fa0ebed50e22bb3af557f6
SHA256 a30ab76be17ae6075aa68927d762209b3633873bfc2d36258f6a0c577234f82b
MD5 03d7f137c99ff295a14810c82ac80788
SHA1 4fdc8fcf59b86febe7b8c78cc9c3ec1e9a9730fe
SHA512 4501674af09b76735fe842c9f6f6e26aa19961c6d18de572a52e31d9ed12db1e000044c10fc7e6471d8ad9f953919eb7ce098466cfc5333a7f13d66431d20022
SSDEEP 3072:tf5QSk6r5LOIGLdaHKZV20TGyfs6YhN9M3NT4Y3Srz91HruDqdqdzKEyRiv:tfmEqZ/GyfigaY3SF1Hegqd4Ra
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5928

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarSub _CIcos _adj_fptan __vbaStrI4 __vbaVarMove __vbaVarVargNofree __vbaFreeVar __vbaAryMove __vbaGosubReturn __vbaLenBstr __vbaStrVarMove __vbaFreeVarList _adj_fdiv_m64 __vbaRaiseEvent __vbaFreeObjList ord516 _adj_fprem1 __vbaRecAnsiToUni __vbaSetSystemError __vbaHresultCheckObj __vbaLenVar _adj_fdiv_m32 __vbaAryDestruct ord593 __vbaVarForInit __vbaExitProc ord594 __vbaObjSet __vbaOnError _adj_fdiv_m16i _adj_fdivr_m16i __vbaVarIndexLoad ord598 __vbaRefVarAry _CIsin ord631 __vbaErase __vbaVarZero ord632 __vbaChkstk __vbaGosubFree ord526 __vbaFileClose EVENT_SINK_AddRef __vbaGenerateBoundsError ord529 __vbaGet3 __vbaStrCmp __vbaPutOwner3 __vbaAryConstruct2 DllFunctionCall ord670 __vbaLbound __vbaRedimPreserve _adj_fpatan __vbaRedim __vbaRecUniToAnsi EVENT_SINK_Release ord601 __vbaUI1I2 _CIsqrt EVENT_SINK_QueryInterface __vbaUI1I4 __vbaExceptHandler __vbaStrToUnicode ord713 _adj_fprem _adj_fdivr_m64 __vbaGosub ord607 ord608 __vbaFPException ord717 __vbaGetOwner3 __vbaUbound __vbaStrVarVal __vbaVarCat ord644 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaInStr ord648 __vbaNew2 ord570 __vbaVar2Vec _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy ord573 ord681 __vbaFreeStrList __vbaDerefAry1 _adj_fdivr_m32 _adj_fdiv_r ord685 ord578 ord100 __vbaI4Var __vbaAryLock __vbaStrToAnsi __vbaFpI4 ord616 _CIatan ord618 __vbaStrMove __vbaR8IntI4 __vbaStrVarCopy _allmul _CItan __vbaUI1Var __vbaAryUnlock __vbaVarForNext _CIexp __vbaFreeObj __vbaFreeStr

Sharing

General

Malware Config

Signatures

File Explorer

03d7f137c99ff295a14810c82ac80788_JaffaCakes118

msvbvm60

generic