1c0f2305e4144e1c70adb45bb0046246_JaffaCakes118

General

Target
1c0f2305e4144e1c70adb45bb0046246_JaffaCakes118
Size 456KB
Sample240701-w57pxssfrc
SHA256 4599ba39d60a40dfeedeb0aa29e782bde509651136ac664860d3043d8cb914d5
MD5 1c0f2305e4144e1c70adb45bb0046246
SHA1 9e88bca92bc9e247e16aa0f94ee238e0cf96a0e4
SHA512 88e1b41d4b0f2e59f3f3c9b280f7407e7f9f047f18d114a9ab4a9a7c8701fec470fcbecc3e6c72b5e7b7a538d9176a3ff8968f59da7c5174507fd45c65364491
SSDEEP 12288:YKoXBiKM10u/lO/Ko52MM/kWWpJVX4mNaYaC6xM:VoRiKM10u/qMcLJVImNaYaP6
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c0f2305e4144e1c70adb45bb0046246_JaffaCakes118

File Explorer

1c0f2305e4144e1c70adb45bb0046246_JaffaCakes118

.exe 456KB

1c0f2305e4144e1c70adb45bb0046246_JaffaCakes118

IMPHASH 9d15b665b23ffeceba710c47aee193c5
SHA256 4599ba39d60a40dfeedeb0aa29e782bde509651136ac664860d3043d8cb914d5
MD5 1c0f2305e4144e1c70adb45bb0046246
SHA1 9e88bca92bc9e247e16aa0f94ee238e0cf96a0e4
SHA512 88e1b41d4b0f2e59f3f3c9b280f7407e7f9f047f18d114a9ab4a9a7c8701fec470fcbecc3e6c72b5e7b7a538d9176a3ff8968f59da7c5174507fd45c65364491
SSDEEP 12288:YKoXBiKM10u/lO/Ko52MM/kWWpJVX4mNaYaC6xM:VoRiKM10u/qMcLJVImNaYaP6
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

7284

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarSub __vbaVarTstGt __vbaStrI2 _CIcos _adj_fptan __vbaStrI4 __vbaVarMove __vbaVarVargNofree __vbaAryMove __vbaFreeVar ord588 __vbaLenBstr __vbaStrVarMove __vbaFreeVarList __vbaEnd _adj_fdiv_m64 __vbaNextEachVar __vbaRaiseEvent __vbaFreeObjList ord516 _adj_fprem1 __vbaCopyBytes __vbaStrCat __vbaLsetFixstr ord660 __vbaSetSystemError __vbaHresultCheckObj ord665 _adj_fdiv_m32 __vbaAryVar __vbaAryDestruct ord593 ord301 __vbaOnError __vbaObjSet ord595 ord596 _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord598 __vbaFpR4 ord307 __vbaVarTstLt __vbaBoolVarNull _CIsin __vbaErase ord631 ord632 __vbaVarZero __vbaVargVarMove __vbaChkstk __vbaFileClose EVENT_SINK_AddRef __vbaGenerateBoundsError ord528 __vbaGet3 ord529 __vbaStrCmp __vbaPutOwner3 __vbaVarTstEq __vbaAryConstruct2 DllFunctionCall __vbaLbound __vbaStrR4 __vbaRedimPreserve _adj_fpatan __vbaR4Var __vbaFixstrConstruct __vbaLateIdCallLd __vbaStrR8 __vbaRedim __vbaUI1ErrVar EVENT_SINK_Release ord600 ord601 _CIsqrt EVENT_SINK_QueryInterface __vbaVarMul __vbaExceptHandler ord711 __vbaStrToUnicode __vbaInputFile __vbaPrintFile ord712 _adj_fprem _adj_fdivr_m64 ord607 __vbaVarDiv ord714 ord608 ord531 __vbaFPException ord717 __vbaGetOwner3 __vbaUbound __vbaStrVarVal __vbaVarCat ord535 ord644 ord537 __vbaStopExe ord645 _CIlog __vbaFileOpen ord648 ord570 __vbaVar2Vec __vbaNew2 ord571 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaI4Str ord681 __vbaFreeStrList __vbaDerefAry1 _adj_fdivr_m32 __vbaPowerR8 _adj_fdiv_r ord578 ord685 ord100 ord579 __vbaVarTstNe __vbaI4Var __vbaAryLock __vbaStrToAnsi __vbaVarDup __vbaFpI2 ord614 __vbaVarCopy ord616 __vbaFpI4 _CIatan __vbaAryCopy __vbaStrMove ord618 __vbaForEachVar __vbaR8IntI4 _allmul __vbaLateIdSt _CItan __vbaAryUnlock __vbaFPInt _CIexp __vbaMidStmtBstr __vbaI4ErrVar __vbaFreeObj __vbaFreeStr

Sharing

General

Malware Config

Signatures

File Explorer

1c0f2305e4144e1c70adb45bb0046246_JaffaCakes118

msvbvm60

generic