098a471e23402039c6d66d3ea3349ca8_JaffaCakes118

General

Target
098a471e23402039c6d66d3ea3349ca8_JaffaCakes118
Size 124KB
Sample240624-tr6jlavbpl
SHA256 cd93de81d93b07e0159e516aa7b9a3373c0995bf21aa4eaaeee3681ef25a3e1a
MD5 098a471e23402039c6d66d3ea3349ca8
SHA1 d9acb274d104d22e2e44dc8eae8fe9c54fa60936
SHA512 993d13b1bf9d92e77f4d19844971773696ad215a107dd05b2f029a5667484ad5d4ab2f546b506c90fc539f6884316d9b79748d2346aed49623e6bea8b95322a3
SSDEEP 3072:aaAfUEiv9kJrQKGcNqnGrD6uvIepyJS6f1qrem:ahfivqJrQKGciwQJr
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
098a471e23402039c6d66d3ea3349ca8_JaffaCakes118

File Explorer

098a471e23402039c6d66d3ea3349ca8_JaffaCakes118

.exe 124KB

098a471e23402039c6d66d3ea3349ca8_JaffaCakes118

IMPHASH a8dbd9c52272d549b660bdd443ead6c5
SHA256 cd93de81d93b07e0159e516aa7b9a3373c0995bf21aa4eaaeee3681ef25a3e1a
MD5 098a471e23402039c6d66d3ea3349ca8
SHA1 d9acb274d104d22e2e44dc8eae8fe9c54fa60936
SHA512 993d13b1bf9d92e77f4d19844971773696ad215a107dd05b2f029a5667484ad5d4ab2f546b506c90fc539f6884316d9b79748d2346aed49623e6bea8b95322a3
SSDEEP 3072:aaAfUEiv9kJrQKGcNqnGrD6uvIepyJS6f1qrem:ahfivqJrQKGciwQJr
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

13992

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

ord582 __vbaVarSub __vbaStrI2 ord583 ord584 _CIcos _adj_fptan __vbaVarMove ord585 __vbaStrI4 ord586 ord693 __vbaVarVargNofree ord187 __vbaFreeVar ord587 __vbaAryMove ord695 __vbaLenBstr __vbaStrVarMove ord696 __vbaFreeVarList __vbaPut3 __vbaEnd _adj_fdiv_m64 __vbaPut4 ord516 ord517 _adj_fprem1 ord518 __vbaStrCat __vbaLsetFixstr __vbaRecDestruct __vbaHresultCheckObj __vbaLenBstrB _adj_fdiv_m32 __vbaAryVar __vbaAryDestruct ord669 __vbaVarIndexLoadRefLock ord593 ord594 __vbaOnError __vbaObjSet _adj_fdiv_m16i _adj_fdivr_m16i ord598 __vbaVarIndexLoad __vbaStrFixstr ord520 ord630 __vbaBoolVarNull __vbaFpR8 _CIsin __vbaErase ord709 ord631 __vbaVarZero ord632 __vbaChkstk __vbaFileClose ord633 EVENT_SINK_AddRef ord527 __vbaGenerateBoundsError ord528 __vbaGet3 __vbaStrCmp __vbaVarTstEq __vbaAryConstruct2 __vbaPutOwner3 __vbaI2I4 ord670 __vbaFpUI1 __vbaRedimPreserve __vbaLbound _adj_fpatan __vbaFixstrConstruct __vbaRedim EVENT_SINK_Release __vbaNew __vbaUI1I2 _CIsqrt __vbaVarAnd EVENT_SINK_QueryInterface __vbaUI1I4 __vbaFpCmpCy __vbaVarMul __vbaExceptHandler ord711 ord712 __vbaStrToUnicode ord606 _adj_fprem _adj_fdivr_m64 ord714 __vbaI2Str ord608 __vbaFPException ord717 __vbaInStrVar __vbaUbound __vbaStrVarVal __vbaVarCat __vbaGetOwner4 ord535 __vbaI2Var ord644 ord537 ord645 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaNew2 __vbaInStr __vbaVar2Vec __vbaVarInt _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy ord681 __vbaFreeStrList __vbaVarNot __vbaDerefAry1 _adj_fdivr_m32 __vbaPowerR8 _adj_fdiv_r ord100 __vbaVarTstNe __vbaI4Var __vbaAryLock __vbaVarAdd __vbaVarDup __vbaStrToAnsi ord614 __vbaFpI4 ord616 ord431 __vbaVarCopy ord617 _CIatan __vbaStrMove __vbaAryCopy ord618 __vbaCastObj ord619 __vbaStrVarCopy _allmul _CItan __vbaAryUnlock __vbaFPInt __vbaUI1Var _CIexp __vbaMidStmtBstr __vbaFreeObj __vbaFreeStr

Sharing

General

Malware Config

Signatures

File Explorer

098a471e23402039c6d66d3ea3349ca8_JaffaCakes118

msvbvm60

generic