20a7963c8e6d6528e4f1d5ef70d168e5_JaffaCakes118

General

Target
20a7963c8e6d6528e4f1d5ef70d168e5_JaffaCakes118
Size 878KB
Sample240703-b4waaa1brf
SHA256 61392f50d90d7295ec7556571e5bf5592fd08d4f199f9010821eabcb5d549c5c
MD5 20a7963c8e6d6528e4f1d5ef70d168e5
SHA1 be908bb61e2687bc70ec676e9c6cdf726d9f40d2
SHA512 fdeec3a7646314d3c7e646edd1a8645191a3621147c46bc2e60ed8802e3079f8b4ebb41dc6bab7613f499b6bc8d69bce8eb2ed6ec3f734853036240f0c0af0c0
SSDEEP 24576:tUNXoLWCsRX6uxYZl/Gh29daIBzrVXyw6nu+phr7y:2NXoKCsRX67a8fBndX61hny
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20a7963c8e6d6528e4f1d5ef70d168e5_JaffaCakes118

File Explorer

20a7963c8e6d6528e4f1d5ef70d168e5_JaffaCakes118

.exe 878KB

20a7963c8e6d6528e4f1d5ef70d168e5_JaffaCakes118

IMPHASH 2e412da933cbaeec8918dcabf2375564
SHA256 61392f50d90d7295ec7556571e5bf5592fd08d4f199f9010821eabcb5d549c5c
MD5 20a7963c8e6d6528e4f1d5ef70d168e5
SHA1 be908bb61e2687bc70ec676e9c6cdf726d9f40d2
SHA512 fdeec3a7646314d3c7e646edd1a8645191a3621147c46bc2e60ed8802e3079f8b4ebb41dc6bab7613f499b6bc8d69bce8eb2ed6ec3f734853036240f0c0af0c0
SSDEEP 24576:tUNXoLWCsRX6uxYZl/Gh29daIBzrVXyw6nu+phr7y:2NXoKCsRX67a8fBndX61hny
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5200

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60.dll

_CIcos _adj_fptan __vbaStrI4 __vbaVarMove __vbaVarVargNofree __vbaAryMove __vbaFreeVar __vbaLenBstr __vbaStrVarMove __vbaFreeVarList _adj_fdiv_m64 _adj_fprem1 __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryVar __vbaAryDestruct __vbaVarForInit __vbaOnError _adj_fdiv_m16i _adj_fdivr_m16i _CIsin __vbaErase __vbaVarZero __vbaChkstk __vbaFileClose EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaGet3 __vbaVarTstEq __vbaAryConstruct2 DllFunctionCall ord670 _adj_fpatan __vbaRedim EVENT_SINK_Release __vbaUI1I2 _CIsqrt EVENT_SINK_QueryInterface __vbaStr2Vec __vbaExceptHandler ord711 __vbaStrToUnicode ord606 _adj_fprem _adj_fdivr_m64 ord607 ord608 __vbaFPException __vbaStrVarVal __vbaUbound __vbaVarCat ord644 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaVar2Vec __vbaNew2 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaFreeStrList __vbaDerefAry1 _adj_fdivr_m32 _adj_fdiv_r ord578 ord100 __vbaI4Var __vbaVarAdd __vbaAryLock __vbaVarDup __vbaStrToAnsi __vbaVarCopy ord617 _CIatan __vbaAryCopy __vbaStrMove _allmul _CItan __vbaAryUnlock __vbaVarForNext _CIexp __vbaFreeObj __vbaFreeStr __vbaI4ErrVar

Sharing

General

Malware Config

Signatures

File Explorer

20a7963c8e6d6528e4f1d5ef70d168e5_JaffaCakes118

msvbvm60.dll

generic