0662f86c5fbd96ae1a1e5ddf8ba2c5ce_JaffaCakes118

General

Target
0662f86c5fbd96ae1a1e5ddf8ba2c5ce_JaffaCakes118
Size 89KB
Sample240623-q95s8starb
SHA256 ae7ebc0fe0d4580fc2155ac27aef1968ef7d00b3674137ab7f0a6e017bc7f74f
MD5 0662f86c5fbd96ae1a1e5ddf8ba2c5ce
SHA1 a76956a3e83d0112aac8a446e6c7ca04c84a40ea
SHA512 6f455d0aaff9236096518d1dd2a61b07971cad141c5044e86081b4edd71b8aaa270b294f72049f8990cd80314b4db2b39684339007c7e610f6142a6d871d826a
SSDEEP 1536:/EbXSxi1KVKde7IPwZZlPiBiQqPgPsLv89dovElxUdSEF2Yyfts:/EbSOWEeMPwZ7PimjYlx+F2e
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0662f86c5fbd96ae1a1e5ddf8ba2c5ce_JaffaCakes118

File Explorer

0662f86c5fbd96ae1a1e5ddf8ba2c5ce_JaffaCakes118

.exe 89KB

0662f86c5fbd96ae1a1e5ddf8ba2c5ce_JaffaCakes118

IMPHASH 29a7bd286e5fd043b2277b29c2c6b467
SHA256 ae7ebc0fe0d4580fc2155ac27aef1968ef7d00b3674137ab7f0a6e017bc7f74f
MD5 0662f86c5fbd96ae1a1e5ddf8ba2c5ce
SHA1 a76956a3e83d0112aac8a446e6c7ca04c84a40ea
SHA512 6f455d0aaff9236096518d1dd2a61b07971cad141c5044e86081b4edd71b8aaa270b294f72049f8990cd80314b4db2b39684339007c7e610f6142a6d871d826a
SSDEEP 1536:/EbXSxi1KVKde7IPwZZlPiBiQqPgPsLv89dovElxUdSEF2Yyfts:/EbSOWEeMPwZ7PimjYlx+F2e
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5068

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

_CIcos _adj_fptan __vbaVarMove __vbaVarVargNofree __vbaAryMove __vbaFreeVar __vbaStrVarMove __vbaLenBstr __vbaFreeVarList _adj_fdiv_m64 __vbaFreeObjList ord516 _adj_fprem1 __vbaRecAnsiToUni __vbaStrCat __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryVar __vbaAryDestruct __vbaVarForInit __vbaOnError _adj_fdiv_m16i _adj_fdivr_m16i _CIsin __vbaErase __vbaVarZero ord632 __vbaChkstk ord526 __vbaFileClose __vbaGenerateBoundsError __vbaGet3 __vbaAryConstruct2 DllFunctionCall _adj_fpatan __vbaRedim __vbaRecUniToAnsi __vbaUI1I2 _CIsqrt __vbaExceptHandler ord711 __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 __vbaFPException ord717 __vbaUbound __vbaStrVarVal __vbaI2Var ord644 _CIlog __vbaErrorOverflow __vbaFileOpen ord570 __vbaVar2Vec __vbaNew2 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord100 __vbaI4Var __vbaVarAdd __vbaAryLock __vbaVarDup __vbaStrToAnsi __vbaVarMod ord616 _CIatan __vbaAryCopy __vbaStrMove _allmul _CItan __vbaAryUnlock __vbaVarForNext _CIexp __vbaI4ErrVar __vbaFreeStr __vbaFreeObj

Sharing

General

Malware Config

Signatures

File Explorer

0662f86c5fbd96ae1a1e5ddf8ba2c5ce_JaffaCakes118

msvbvm60

generic