006d8441e7fced79d603807b0581f171_JaffaCakes118

General

Target
006d8441e7fced79d603807b0581f171_JaffaCakes118
Size 801KB
Sample240622-asp4fsxhqa
SHA256 694175c88d632f08a6ad09a9be03aac4a82432cc5c3cc0e3e3dfdd7f360af651
MD5 006d8441e7fced79d603807b0581f171
SHA1 a14aca213e51b7e78d31f89724a183099d8a72ba
SHA512 5907b4f4b92b80c10e19cea4e6d837605b4630517eecd6cb1a2eb37eaab5356315368813fe3fa56a1bb7b1c6855c088e6d3c4a2a8786b03bf3c598bd4a49a1f6
SSDEEP 12288:75l3YBlSA8NlmWzFJ74xQUlQDI/LftxL4/MF4o0pUi6iKH0F0ZCqtl1RB0Ce2y:7n5lmWzFJ74xQUlQDI/znEVxKUGJtFSR
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
006d8441e7fced79d603807b0581f171_JaffaCakes118

File Explorer

006d8441e7fced79d603807b0581f171_JaffaCakes118

.exe 801KB

006d8441e7fced79d603807b0581f171_JaffaCakes118

IMPHASH 863368c64ce108e15b8dde63c326f1e5
SHA256 694175c88d632f08a6ad09a9be03aac4a82432cc5c3cc0e3e3dfdd7f360af651
MD5 006d8441e7fced79d603807b0581f171
SHA1 a14aca213e51b7e78d31f89724a183099d8a72ba
SHA512 5907b4f4b92b80c10e19cea4e6d837605b4630517eecd6cb1a2eb37eaab5356315368813fe3fa56a1bb7b1c6855c088e6d3c4a2a8786b03bf3c598bd4a49a1f6
SSDEEP 12288:75l3YBlSA8NlmWzFJ74xQUlQDI/LftxL4/MF4o0pUi6iKH0F0ZCqtl1RB0Ce2y:7n5lmWzFJ74xQUlQDI/znEVxKUGJtFSR
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

7988

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

EVENT_SINK_GetIDsOfNames __vbaVarSub __vbaStrI2 _CIcos _adj_fptan __vbaVarMove __vbaStrI4 __vbaVarVargNofree __vbaAryMove __vbaFreeVar __vbaLateIdCall __vbaStrVarMove __vbaLenBstr __vbaLineInputStr __vbaPut3 __vbaFreeVarList __vbaEnd _adj_fdiv_m64 EVENT_SINK_Invoke __vbaFreeObjList ord516 _adj_fprem1 __vbaRecAnsiToUni __vbaCopyBytes __vbaResume __vbaVarCmpNe __vbaStrCat __vbaLsetFixstr __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryVar ord666 ord667 Zombie_GetTypeInfo __vbaAryDestruct __vbaVarPow __vbaExitProc __vbaVarForInit __vbaOnError __vbaObjSet ord595 ord596 _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord598 __vbaBoolVar __vbaStrFixstr __vbaBoolVarNull _CIsin ord631 __vbaChkstk __vbaFileClose EVENT_SINK_AddRef __vbaGenerateBoundsError ord528 __vbaGet3 __vbaStrCmp __vbaAryConstruct2 __vbaVarTstEq __vbaVarLikeVar __vbaObjVar __vbaI2I4 DllFunctionCall __vbaCastObjVar __vbaLbound __vbaRedimPreserve _adj_fpatan __vbaLateIdCallLd Zombie_GetTypeInfoCount __vbaRedim __vbaStrR8 __vbaRecUniToAnsi EVENT_SINK_Release __vbaNew __vbaUI1I2 _CIsqrt __vbaVarAnd EVENT_SINK_QueryInterface __vbaVarMul __vbaStrUI1 __vbaExceptHandler ord711 __vbaStrToUnicode __vbaPrintFile ord713 _adj_fprem _adj_fdivr_m64 ord607 __vbaI2Str ord608 ord716 __vbaFPException ord717 __vbaUbound __vbaStrVarVal __vbaVarCat __vbaI2Var ord644 ord537 ord645 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaVar2Vec __vbaVarLateMemCallLdRf __vbaR8Str __vbaNew2 __vbaInStr ord571 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaI4Str ord681 __vbaVarNot __vbaFreeStrList ord576 _adj_fdivr_m32 _adj_fdiv_r ord100 __vbaVarTstNe __vbaVarSetVar __vbaI4Var __vbaVarCmpEq ord610 __vbaAryLock __vbaLateMemCall __vbaVarAdd __vbaVarDup __vbaStrToAnsi ord612 __vbaFpI4 __vbaVarLateMemCallLd ord616 __vbaVarCopy __vbaLateMemCallLd ord617 _CIatan __vbaAryCopy __vbaStrMove __vbaCastObj __vbaStrVarCopy ord619 _allmul __vbaLateIdSt _CItan ord546 __vbaAryUnlock __vbaVarForNext _CIexp __vbaFreeObj __vbaFreeStr ord581

Sharing

General

Malware Config

Signatures

File Explorer

006d8441e7fced79d603807b0581f171_JaffaCakes118

msvbvm60

generic