27bea8d5dc7096ba6bc3e64eb8c0538b_JaffaCakes118

General

Target
27bea8d5dc7096ba6bc3e64eb8c0538b_JaffaCakes118
Size 68KB
Sample240706-jelnjstbne
SHA256 6da67635f97ae7851d174785a537bb652cdd81df909c6e5a65047313c16b25f4
MD5 27bea8d5dc7096ba6bc3e64eb8c0538b
SHA1 d30a8dba846837f4264ac3727272991df1341e08
SHA512 0361158cc4c749aa7d3a04b7132d97bd6ba9e7ad86dc7f253f0cd01d1e933495e68dbd9494585d0b27c2f1e8545dd4fd3183fd40dd955ec85cdf013889d1400b
SSDEEP 768:1XxOS44sR2L2Xd24dW/rvMQMNh4Mmv71rHWd8fif2QnAiF5e41u1tcoOVVRVcs:RP7LRKwbMFNev7tBqfTHDKtcoAVcs
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27bea8d5dc7096ba6bc3e64eb8c0538b_JaffaCakes118

File Explorer

27bea8d5dc7096ba6bc3e64eb8c0538b_JaffaCakes118

.exe 68KB

27bea8d5dc7096ba6bc3e64eb8c0538b_JaffaCakes118

IMPHASH 8bbe56be552e64d1269338e4dd3da9ff
SHA256 6da67635f97ae7851d174785a537bb652cdd81df909c6e5a65047313c16b25f4
MD5 27bea8d5dc7096ba6bc3e64eb8c0538b
SHA1 d30a8dba846837f4264ac3727272991df1341e08
SHA512 0361158cc4c749aa7d3a04b7132d97bd6ba9e7ad86dc7f253f0cd01d1e933495e68dbd9494585d0b27c2f1e8545dd4fd3183fd40dd955ec85cdf013889d1400b
SSDEEP 768:1XxOS44sR2L2Xd24dW/rvMQMNh4Mmv71rHWd8fif2QnAiF5e41u1tcoOVVRVcs:RP7LRKwbMFNev7tBqfTHDKtcoAVcs
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

24814

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

_CIcos _adj_fptan __vbaStrI4 __vbaVarMove __vbaVarVargNofree __vbaFreeVar __vbaAryMove __vbaLenBstr __vbaStrVarMove __vbaGosubReturn __vbaFreeVarList _adj_fdiv_m64 ord516 _adj_fprem1 __vbaRecAnsiToUni __vbaStrCat __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryDestruct _adj_fdiv_m16i _adj_fdivr_m16i _CIsin ord631 __vbaErase ord632 __vbaVarZero __vbaChkstk __vbaGosubFree __vbaGenerateBoundsError __vbaStrCmp __vbaAryConstruct2 __vbaI2I4 DllFunctionCall __vbaRedimPreserve _adj_fpatan __vbaRedim __vbaRecUniToAnsi __vbaUI1I2 _CIsqrt __vbaUI1I4 __vbaExceptHandler __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 __vbaGosub ord607 __vbaFPException ord717 __vbaUbound __vbaStrVarVal __vbaVarCat ord644 _CIlog __vbaErrorOverflow __vbaNew2 __vbaVar2Vec _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy ord573 __vbaFreeStrList __vbaDerefAry1 _adj_fdivr_m32 _adj_fdiv_r ord100 __vbaAryLock __vbaStrToAnsi __vbaVarDup __vbaFpI4 ord616 _CIatan __vbaStrMove ord618 __vbaUI1Str __vbaStrVarCopy _allmul _CItan __vbaAryUnlock _CIexp __vbaI4ErrVar __vbaFreeStr __vbaFreeObj

Sharing

General

Malware Config

Signatures

File Explorer

27bea8d5dc7096ba6bc3e64eb8c0538b_JaffaCakes118

msvbvm60

generic