23f02920a6e04d1a93bf7b0fe5846ce0_JaffaCakes118

General

Target
23f02920a6e04d1a93bf7b0fe5846ce0_JaffaCakes118
Size 73KB
Sample240704-abnt3avdqe
SHA256 ea543e1974958526555a37d1bb6b94c95620196c2ff72137eb5486c313c8cc3f
MD5 23f02920a6e04d1a93bf7b0fe5846ce0
SHA1 435fcdfacf46e4ceb1e89f0c12f62ad2de14e400
SHA512 4952ccba797d09890b92d489f11be425b86dd297653860befcc7b5142b1d64ef4c182de36eab27cc99fb6df78c1695286f937c627cdc65f49001962dd24690af
SSDEEP 1536:HGFJkVFLP7BZ4OImlQJjQjweI8uY37BZohugPOsdsSyxS:msrP34OIqJq1457usxS
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23f02920a6e04d1a93bf7b0fe5846ce0_JaffaCakes118

File Explorer

23f02920a6e04d1a93bf7b0fe5846ce0_JaffaCakes118

.exe 73KB

23f02920a6e04d1a93bf7b0fe5846ce0_JaffaCakes118

IMPHASH d2f7424d8608fd7e0b63a684837f8aa0
SHA256 ea543e1974958526555a37d1bb6b94c95620196c2ff72137eb5486c313c8cc3f
MD5 23f02920a6e04d1a93bf7b0fe5846ce0
SHA1 435fcdfacf46e4ceb1e89f0c12f62ad2de14e400
SHA512 4952ccba797d09890b92d489f11be425b86dd297653860befcc7b5142b1d64ef4c182de36eab27cc99fb6df78c1695286f937c627cdc65f49001962dd24690af
SSDEEP 1536:HGFJkVFLP7BZ4OImlQJjQjweI8uY37BZohugPOsdsSyxS:msrP34OIqJq1457usxS
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5112

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

_CIcos _adj_fptan __vbaStrI4 __vbaVarMove __vbaVarVargNofree __vbaAryMove __vbaFreeVar __vbaStrVarMove __vbaLenBstr __vbaFreeVarList _adj_fdiv_m64 _adj_fprem1 __vbaRecAnsiToUni __vbaStrCat __vbaLsetFixstr __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryVar __vbaAryDestruct __vbaVarForInit _adj_fdiv_m16i _adj_fdivr_m16i ord598 _CIsin __vbaErase __vbaVarZero ord525 ord632 __vbaChkstk __vbaFileClose EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaGet3 __vbaVarTstEq __vbaAryConstruct2 DllFunctionCall ord670 _adj_fpatan __vbaFixstrConstruct __vbaRedim __vbaRecUniToAnsi EVENT_SINK_Release __vbaUI1I2 _CIsqrt EVENT_SINK_QueryInterface __vbaExceptHandler ord711 __vbaStrToUnicode ord712 ord713 _adj_fprem _adj_fdivr_m64 __vbaFPException ord717 __vbaUbound __vbaStrVarVal ord644 ord537 _CIlog __vbaErrorOverflow __vbaFileOpen ord570 __vbaNew2 __vbaVar2Vec _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaFreeStrList __vbaDerefAry1 _adj_fdivr_m32 _adj_fdiv_r ord100 __vbaI4Var __vbaVarAdd __vbaAryLock __vbaStrToAnsi ord616 _CIatan __vbaStrMove __vbaAryCopy _allmul _CItan __vbaAryUnlock __vbaVarForNext _CIexp __vbaI4ErrVar __vbaFreeStr __vbaFreeObj

Sharing

General

Malware Config

Signatures

File Explorer

23f02920a6e04d1a93bf7b0fe5846ce0_JaffaCakes118

msvbvm60

generic