00e91eb0954d2873b150eb39f6c6c6db_JaffaCakes118

General

Target
00e91eb0954d2873b150eb39f6c6c6db_JaffaCakes118
Size 464KB
Sample240622-c48q2stelc
SHA256 e82371fe729c5917bdb83674dc4417e88486d72ccba7386b2dabfeb473eefb38
MD5 00e91eb0954d2873b150eb39f6c6c6db
SHA1 8cddbcaa8d2c5b9e6a3172914a0474ea47bb8b2b
SHA512 e8f8ba2e2bb2b447bea6ec505f3345ebb57d8b0378535299adf965391a7e283ba9ad0b00d8c109a0628fe5c4b70346577c29a6541febf0cf0933b7b6b13fcd47
SSDEEP 3072:YttOFSeDwSzL5AFpuhKF/Fb/5NMHVTWXF+aP8CsRKJeAgDw:YtkFEUIuhKF/FPM1TWXF+v5Agk
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00e91eb0954d2873b150eb39f6c6c6db_JaffaCakes118

File Explorer

00e91eb0954d2873b150eb39f6c6c6db_JaffaCakes118

.exe 464KB

00e91eb0954d2873b150eb39f6c6c6db_JaffaCakes118

IMPHASH a9f53857ef549eeca21412f44c6814d1
SHA256 e82371fe729c5917bdb83674dc4417e88486d72ccba7386b2dabfeb473eefb38
MD5 00e91eb0954d2873b150eb39f6c6c6db
SHA1 8cddbcaa8d2c5b9e6a3172914a0474ea47bb8b2b
SHA512 e8f8ba2e2bb2b447bea6ec505f3345ebb57d8b0378535299adf965391a7e283ba9ad0b00d8c109a0628fe5c4b70346577c29a6541febf0cf0933b7b6b13fcd47
SSDEEP 3072:YttOFSeDwSzL5AFpuhKF/Fb/5NMHVTWXF+aP8CsRKJeAgDw:YtkFEUIuhKF/FPM1TWXF+v5Agk
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5068

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

_CIcos _adj_fptan __vbaVarMove __vbaVarVargNofree __vbaFreeVar __vbaAryMove __vbaStrVarMove __vbaLenBstr __vbaFreeVarList _adj_fdiv_m64 __vbaFreeObjList ord516 _adj_fprem1 __vbaRecAnsiToUni __vbaStrCat __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryVar __vbaAryDestruct __vbaVarForInit __vbaOnError _adj_fdiv_m16i _adj_fdivr_m16i _CIsin __vbaErase __vbaVarZero ord632 __vbaChkstk ord526 __vbaFileClose __vbaGenerateBoundsError __vbaGet3 __vbaAryConstruct2 DllFunctionCall _adj_fpatan __vbaRedim __vbaRecUniToAnsi __vbaUI1I2 _CIsqrt __vbaExceptHandler ord711 __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 __vbaFPException ord717 __vbaUbound __vbaStrVarVal __vbaI2Var ord644 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaNew2 ord570 __vbaVar2Vec _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord100 __vbaI4Var __vbaAryLock __vbaVarAdd __vbaStrToAnsi __vbaVarDup __vbaVarMod ord616 _CIatan __vbaStrMove __vbaAryCopy _allmul _CItan __vbaAryUnlock __vbaVarForNext _CIexp __vbaI4ErrVar __vbaFreeObj __vbaFreeStr

Sharing

General

Malware Config

Signatures

File Explorer

00e91eb0954d2873b150eb39f6c6c6db_JaffaCakes118

msvbvm60

generic