0d9d5086b90d928250d6aa6b83654388_JaffaCakes118

General

Target
0d9d5086b90d928250d6aa6b83654388_JaffaCakes118
Size 452KB
Sample240625-lt69xasekh
SHA256 389bc3d4b2004ed38ea975babd48907642d0aec246bf92056f54fc3fb5b7de74
MD5 0d9d5086b90d928250d6aa6b83654388
SHA1 ecd0ad149b42909e3ca402d9fe0f15169e875c3b
SHA512 3a5e140071cff0e87f6a891e2056ccf6f1184e708276977e50eb0434cb2bcb9eb70495c88c63a70c9da41fcdf4b60bb120432a505241f692e0bfd20cd2ecf5e6
SSDEEP 12288:glQd3vbzQUWERlRwV4IdAzack6v+HNeEky:TdfbVWqfwFAYSkh
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d9d5086b90d928250d6aa6b83654388_JaffaCakes118

File Explorer

0d9d5086b90d928250d6aa6b83654388_JaffaCakes118

.exe 452KB

0d9d5086b90d928250d6aa6b83654388_JaffaCakes118

IMPHASH b20e1db26197e99844f268c60ca1cc0b
SHA256 389bc3d4b2004ed38ea975babd48907642d0aec246bf92056f54fc3fb5b7de74
MD5 0d9d5086b90d928250d6aa6b83654388
SHA1 ecd0ad149b42909e3ca402d9fe0f15169e875c3b
SHA512 3a5e140071cff0e87f6a891e2056ccf6f1184e708276977e50eb0434cb2bcb9eb70495c88c63a70c9da41fcdf4b60bb120432a505241f692e0bfd20cd2ecf5e6
SSDEEP 12288:glQd3vbzQUWERlRwV4IdAzack6v+HNeEky:TdfbVWqfwFAYSkh
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

8808

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarTstGt __vbaVarSub __vbaStrI2 _CIcos _adj_fptan __vbaVarMove __vbaStrI4 __vbaVarVargNofree __vbaFreeVar __vbaAryMove __vbaLateIdCall __vbaStrVarMove __vbaLenBstr __vbaFreeVarList __vbaEnd _adj_fdiv_m64 __vbaRaiseEvent __vbaNextEachVar __vbaFreeObjList ord516 __vbaStrErrVarCopy _adj_fprem1 __vbaRecAnsiToUni ord518 __vbaCopyBytes __vbaVarCmpNe __vbaStrCat __vbaLsetFixstr ord660 __vbaRecDestruct __vbaSetSystemError __vbaHresultCheckObj ord662 _adj_fdiv_m32 __vbaAryVar __vbaAryDestruct ord592 __vbaVarForInit __vbaExitProc __vbaOnError __vbaObjSet ord595 _adj_fdiv_m16i ord702 __vbaObjSetAddref _adj_fdivr_m16i ord598 ord520 __vbaBoolVar __vbaFpR8 __vbaBoolVarNull _CIsin __vbaErase ord709 ord631 __vbaVarZero ord525 ord632 __vbaChkstk ord526 __vbaFileClose EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaGet3 __vbaStrCmp ord529 __vbaPutOwner3 __vbaAryConstruct2 __vbaVarTstEq DllFunctionCall ord670 __vbaVarOr __vbaRedimPreserve __vbaLbound _adj_fpatan __vbaFixstrConstruct __vbaLateIdCallLd __vbaRedim __vbaUI1ErrVar __vbaRecUniToAnsi EVENT_SINK_Release ord601 _CIsqrt __vbaVarAnd EVENT_SINK_QueryInterface __vbaExceptHandler ord711 __vbaStrToUnicode ord712 __vbaPrintFile ord713 ord606 _adj_fprem _adj_fdivr_m64 __vbaI2Str ord607 __vbaVarDiv ord608 ord531 __vbaFPException ord717 __vbaUbound __vbaStrVarVal __vbaVarCat __vbaDateVar ord536 ord644 ord537 ord645 _CIlog __vbaFileOpen ord570 __vbaNew2 ord648 __vbaVar2Vec __vbaInStr _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy ord681 __vbaI4Str __vbaFreeStrList _adj_fdivr_m32 __vbaPowerR8 _adj_fdiv_r ord685 ord100 __vbaVarTstNe __vbaI4Var __vbaVarCmpEq __vbaAryLock __vbaVarAdd __vbaVarDup __vbaStrToAnsi __vbaFpI2 __vbaFpI4 ord616 __vbaVarTstGe __vbaVarCopy __vbaRecDestructAnsi ord617 _CIatan __vbaStrMove ord618 __vbaCastObj __vbaAryCopy __vbaR8IntI4 __vbaForEachVar ord619 __vbaStrVarCopy _allmul __vbaLateIdSt _CItan ord546 __vbaFPInt __vbaAryUnlock __vbaVarForNext _CIexp __vbaI4ErrVar __vbaFreeStr __vbaFreeObj

Sharing

General

Malware Config

Signatures

File Explorer

0d9d5086b90d928250d6aa6b83654388_JaffaCakes118

msvbvm60

generic