204737a14ffd80e2aea582a2322458d8_JaffaCakes118

General

Target
204737a14ffd80e2aea582a2322458d8_JaffaCakes118
Size 416KB
Sample240702-wfbk7avaje
SHA256 368941dcf234eca1151b04def2bbbf08419d472d2d0ed1fd6b1c4c4c01614809
MD5 204737a14ffd80e2aea582a2322458d8
SHA1 84fdbe2b1dda7d0aa28231da05551082b9bf449e
SHA512 1c010c1766842addde212d8e6e41436bf52cc755135e57e0695e7a036b3a16b9489b2489820b1212fb0c2c78cc9b89d4bb6699c7121b415efcfcc76f31ae9d15
SSDEEP 3072:Ru9izfYc/xH+/z3GhxDShxT2fS9+Zyi2eSHPFBgKLjBB9W541RXhxGvckxLHQbIG:g9g0kxLHQbP
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
204737a14ffd80e2aea582a2322458d8_JaffaCakes118

File Explorer

204737a14ffd80e2aea582a2322458d8_JaffaCakes118

.exe 416KB

204737a14ffd80e2aea582a2322458d8_JaffaCakes118

IMPHASH 491e220ee2f8739726e3d1649f382958
SHA256 368941dcf234eca1151b04def2bbbf08419d472d2d0ed1fd6b1c4c4c01614809
MD5 204737a14ffd80e2aea582a2322458d8
SHA1 84fdbe2b1dda7d0aa28231da05551082b9bf449e
SHA512 1c010c1766842addde212d8e6e41436bf52cc755135e57e0695e7a036b3a16b9489b2489820b1212fb0c2c78cc9b89d4bb6699c7121b415efcfcc76f31ae9d15
SSDEEP 3072:Ru9izfYc/xH+/z3GhxDShxT2fS9+Zyi2eSHPFBgKLjBB9W541RXhxGvckxLHQbIG:g9g0kxLHQbP
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5496

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

_CIcos _adj_fptan __vbaVarMove __vbaVarVargNofree __vbaAryMove __vbaFreeVar __vbaLenBstr __vbaStrVarMove ord696 __vbaFreeVarList __vbaEnd _adj_fdiv_m64 __vbaFreeObjList ord516 _adj_fprem1 __vbaRecAnsiToUni ord628 __vbaStrCat __vbaSetSystemError __vbaLenBstrB __vbaHresultCheckObj __vbaVargVarCopy _adj_fdiv_m32 __vbaAryVar __vbaAryDestruct __vbaOnError _adj_fdiv_m16i _adj_fdivr_m16i ord598 __vbaCyStr _CIsin __vbaErase ord631 __vbaVarZero ord632 __vbaChkstk EVENT_SINK_AddRef __vbaStrCmp __vbaAryConstruct2 __vbaI2I4 DllFunctionCall ord563 __vbaRedimPreserve __vbaLbound _adj_fpatan __vbaRedim __vbaRecUniToAnsi EVENT_SINK_Release __vbaUI1I2 _CIsqrt EVENT_SINK_QueryInterface __vbaExceptHandler __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 __vbaI2Str ord608 __vbaFPException ord717 __vbaUbound __vbaStrVarVal __vbaVarCat ord644 ord537 _CIlog __vbaErrorOverflow __vbaNew2 __vbaVar2Vec _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy ord681 __vbaI4Str __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord100 __vbaI4Var __vbaAryLock __vbaStrToAnsi __vbaAryVarVarg __vbaFpI4 _CIatan __vbaAryCopy __vbaStrMove _allmul _CItan __vbaAryUnlock _CIexp __vbaI4ErrVar __vbaFreeStr ord581

Sharing

General

Malware Config

Signatures

File Explorer

204737a14ffd80e2aea582a2322458d8_JaffaCakes118

msvbvm60

generic