041c31329105af7594d7daa34aa90d8e_JaffaCakes118

General

Target
041c31329105af7594d7daa34aa90d8e_JaffaCakes118
Size 352KB
Sample240620-jjclfawfpg
SHA256 dc8468271e4303e59b32d4ab1d8c59bf1eb6aae160c29be086a55ad209433e34
MD5 041c31329105af7594d7daa34aa90d8e
SHA1 e9a052ac566c9f0b63364fd6de4965d200414b31
SHA512 8049606b40b332c85bae3e3a28fc14c546ba11000c0526ccd6eb5316cd1ef6e4c9683ee9c777d1d9e69407f43f31f07861c6185e7715c3d396d53d3c85c37c5d
SSDEEP 3072:9zLyV3kF21im+YL1LyV3IfExgb3pOISniwadh1PpcWByqFtoO/HR3w2d:9cQmp+NW7SnoJ+tqFP3w2d
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
041c31329105af7594d7daa34aa90d8e_JaffaCakes118

File Explorer

041c31329105af7594d7daa34aa90d8e_JaffaCakes118

.exe 352KB

041c31329105af7594d7daa34aa90d8e_JaffaCakes118

IMPHASH 72000d2909c7beb60f3dbded43839ae4
SHA256 dc8468271e4303e59b32d4ab1d8c59bf1eb6aae160c29be086a55ad209433e34
MD5 041c31329105af7594d7daa34aa90d8e
SHA1 e9a052ac566c9f0b63364fd6de4965d200414b31
SHA512 8049606b40b332c85bae3e3a28fc14c546ba11000c0526ccd6eb5316cd1ef6e4c9683ee9c777d1d9e69407f43f31f07861c6185e7715c3d396d53d3c85c37c5d
SSDEEP 3072:9zLyV3kF21im+YL1LyV3IfExgb3pOISniwadh1PpcWByqFtoO/HR3w2d:9cQmp+NW7SnoJ+tqFP3w2d
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

73334

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

_CIcos _adj_fptan __vbaStrI4 __vbaVarMove __vbaVarVargNofree __vbaFreeVar __vbaLenBstr __vbaFreeVarList __vbaEnd _adj_fdiv_m64 __vbaNextEachVar __vbaFreeObjList _adj_fprem1 __vbaStrCat __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 ord666 __vbaOnError __vbaObjSet _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord599 __vbaBoolVar __vbaBoolVarNull __vbaVargVar _CIsin ord525 __vbaChkstk __vbaFileClose EVENT_SINK_AddRef __vbaVarTstEq __vbaObjVar __vbaI2I4 DllFunctionCall _adj_fpatan EVENT_SINK_Release ord600 _CIsqrt EVENT_SINK_QueryInterface __vbaExceptHandler __vbaStrToUnicode ord606 _adj_fprem _adj_fdivr_m64 ord608 ord530 ord716 __vbaFPException __vbaStrVarVal __vbaVarCat __vbaI2Var ord645 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaNew2 ord648 __vbaVarLateMemCallLdRf _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy ord681 __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord685 ord100 __vbaVarTstNe __vbaVarSetVar __vbaI4Var __vbaLateMemCall __vbaVarAdd __vbaVarDup __vbaStrToAnsi __vbaVarCopy __vbaVarLateMemCallLd ord616 __vbaLateMemCallLd _CIatan __vbaStrMove ord618 __vbaStrVarCopy __vbaForEachVar _allmul _CItan __vbaAryUnlock _CIexp __vbaFreeObj __vbaFreeStr

Sharing

General

Malware Config

Signatures

File Explorer

041c31329105af7594d7daa34aa90d8e_JaffaCakes118

msvbvm60

generic