0fb9348c409ca9eab65f1c966196968f_JaffaCakes118

General

Target
0fb9348c409ca9eab65f1c966196968f_JaffaCakes118
Size 140KB
Sample240625-16txnsxake
SHA256 b17cf27d86a5f39dcd461c7f15cd00015c924b2802edc7cd75af1c4ac0f57b31
MD5 0fb9348c409ca9eab65f1c966196968f
SHA1 f2727be6a4227e5d081299816732049018285e76
SHA512 ba2be1d146aa44ea8d47990d079cb73dedb97592ae233144c02441f0ce931107aaa2fc4112569bbfb2ae042c171bd591eb3f4f3d58e245572fc7128361a041a4
SSDEEP 3072:721/wXYUBtv2ZQT1txh+50IkT4XF4Sktahcsgmno:72wXNtv2ZQxtxh+59k8HkIhImno
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fb9348c409ca9eab65f1c966196968f_JaffaCakes118

File Explorer

0fb9348c409ca9eab65f1c966196968f_JaffaCakes118

.exe 140KB

0fb9348c409ca9eab65f1c966196968f_JaffaCakes118

IMPHASH 078c8a547c02b4a862f1b3204c8bfc20
SHA256 b17cf27d86a5f39dcd461c7f15cd00015c924b2802edc7cd75af1c4ac0f57b31
MD5 0fb9348c409ca9eab65f1c966196968f
SHA1 f2727be6a4227e5d081299816732049018285e76
SHA512 ba2be1d146aa44ea8d47990d079cb73dedb97592ae233144c02441f0ce931107aaa2fc4112569bbfb2ae042c171bd591eb3f4f3d58e245572fc7128361a041a4
SSDEEP 3072:721/wXYUBtv2ZQT1txh+50IkT4XF4Sktahcsgmno:72wXNtv2ZQxtxh+59k8HkIhImno
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5900

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaStrI2 _CIcos _adj_fptan __vbaStrI4 __vbaVarMove __vbaFreeVar __vbaLateIdCall __vbaStrVarMove __vbaLenBstr __vbaFreeVarList __vbaEnd _adj_fdiv_m64 __vbaFreeObjList ord516 _adj_fprem1 ord518 __vbaVarCmpNe __vbaStrCat ord660 __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaExitProc __vbaVarForInit __vbaObjSet __vbaOnError ord595 _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord520 __vbaBoolVarNull __vbaFpR8 _CIsin ord631 ord632 __vbaChkstk ord526 __vbaFileClose EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaStrCmp __vbaVarTstEq __vbaI2I4 DllFunctionCall __vbaVarOr __vbaCastObjVar _adj_fpatan __vbaR4Var __vbaLateIdCallLd __vbaRedim EVENT_SINK_Release __vbaUI1I2 _CIsqrt EVENT_SINK_QueryInterface __vbaExceptHandler __vbaStrToUnicode __vbaPrintFile __vbaInputFile _adj_fprem _adj_fdivr_m64 ord608 __vbaFPException __vbaVarCat ord536 ord645 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaInStr __vbaNew2 __vbaR8Str ord571 _adj_fdiv_m32i _adj_fdivr_m32i __vbaVarSetObj __vbaStrCopy __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord685 ord100 __vbaI4Var __vbaVarCmpEq __vbaAryLock __vbaVarAdd __vbaStrToAnsi __vbaVarDup __vbaVarCopy ord617 _CIatan __vbaStrMove ord619 _allmul __vbaLateIdSt __vbaVarLateMemCallSt ord652 _CItan __vbaAryUnlock __vbaVarForNext _CIexp __vbaFreeObj __vbaFreeStr

Sharing

General

Malware Config

Signatures

File Explorer

0fb9348c409ca9eab65f1c966196968f_JaffaCakes118

msvbvm60

generic