18349db9314e2b241d1da7295d370ab3_JaffaCakes118

General

Target
18349db9314e2b241d1da7295d370ab3_JaffaCakes118
Size 140KB
Sample240628-bb2xcssbrd
SHA256 e18d12531e46e6061f61049ea30335571bf8201438aacf1e815f4771c9262fac
MD5 18349db9314e2b241d1da7295d370ab3
SHA1 4685a51e858e296ba23f99a1ddab0177558caf10
SHA512 4758834bde8d98448a5bc3268dc376b21621347451245ac38e38f230a69f191c3b4344d9faf5e650d8371b197ad09a2c759ed63ce014669df6935e37285585ab
SSDEEP 1536:3uG26deOfccCm9gkm7UfanxJFaJgupDJfL8qaFpGLdEqIX0FbrD:eGTokXVZgURpD5AHpSdEqIkp
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18349db9314e2b241d1da7295d370ab3_JaffaCakes118

File Explorer

18349db9314e2b241d1da7295d370ab3_JaffaCakes118

.exe 140KB

18349db9314e2b241d1da7295d370ab3_JaffaCakes118

IMPHASH e1550693e8e7420ffb466e86e10dd9ce
SHA256 e18d12531e46e6061f61049ea30335571bf8201438aacf1e815f4771c9262fac
MD5 18349db9314e2b241d1da7295d370ab3
SHA1 4685a51e858e296ba23f99a1ddab0177558caf10
SHA512 4758834bde8d98448a5bc3268dc376b21621347451245ac38e38f230a69f191c3b4344d9faf5e650d8371b197ad09a2c759ed63ce014669df6935e37285585ab
SSDEEP 1536:3uG26deOfccCm9gkm7UfanxJFaJgupDJfL8qaFpGLdEqIX0FbrD:eGTokXVZgURpD5AHpSdEqIkp
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

8980

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarTstGt __vbaVarSub __vbaStrI2 _CIcos _adj_fptan __vbaVarMove __vbaStrI4 __vbaAryMove __vbaFreeVar __vbaLenBstr __vbaStrVarMove __vbaLateIdCall __vbaPut3 __vbaEnd __vbaFreeVarList _adj_fdiv_m64 __vbaFreeObjList ord516 __vbaStrErrVarCopy _adj_fprem1 ord518 __vbaResume __vbaStrCat ord660 __vbaSetSystemError ord662 __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryDestruct ord593 __vbaExitProc ord300 ord594 ord301 ord595 __vbaOnError __vbaObjSet ord302 _adj_fdiv_m16i ord303 __vbaObjSetAddref _adj_fdivr_m16i ord598 ord306 __vbaForEachCollVar ord520 ord307 ord308 ord309 __vbaBoolVarNull _CIsin ord709 __vbaVarCmpGt ord632 __vbaChkstk __vbaFileClose ord526 EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaExitEachColl __vbaStrCmp __vbaAryConstruct2 __vbaPutOwner3 __vbaVarTstEq __vbaI2I4 __vbaNextEachCollVar DllFunctionCall __vbaVarOr __vbaFpUI1 _adj_fpatan __vbaLateIdCallLd __vbaStrR8 EVENT_SINK_Release __vbaNew ord600 __vbaUI1I2 _CIsqrt EVENT_SINK_QueryInterface __vbaExceptHandler __vbaStrToUnicode ord712 ord606 _adj_fprem _adj_fdivr_m64 ord714 ord608 __vbaFPException __vbaInStrVar ord717 __vbaStrVarVal __vbaUbound __vbaVarCat __vbaDateVar __vbaI2Var __vbaFileSeek _CIlog __vbaErrorOverflow __vbaFileOpen __vbaVar2Vec ord648 ord570 __vbaInStr __vbaNew2 _adj_fdiv_m32i _adj_fdivr_m32i ord573 __vbaStrCopy __vbaFreeStrList _adj_fdivr_m32 __vbaR8Var _adj_fdiv_r ord578 ord685 ord100 __vbaVarTstNe __vbaI4Var ord610 __vbaVarAdd ord612 __vbaStrToAnsi __vbaVarDup __vbaFpI2 ord616 __vbaVarCopy __vbaFpI4 ord617 _CIatan __vbaCastObj __vbaStrMove ord619 ord650 _allmul __vbaLenVarB __vbaLateIdSt _CItan ord546 _CIexp __vbaFreeObj __vbaFreeStr

Sharing

General

Malware Config

Signatures

File Explorer

18349db9314e2b241d1da7295d370ab3_JaffaCakes118

msvbvm60

generic