28089893c1d9e756f0ae4af23123ec53_JaffaCakes118

General

Target
28089893c1d9e756f0ae4af23123ec53_JaffaCakes118
Size 356KB
Sample240706-lbkceswerg
SHA256 9084d64fbcd5e6562eb4f80af38be53cd0a13570c5c99609825922556139f290
MD5 28089893c1d9e756f0ae4af23123ec53
SHA1 a71764ef8171820e147da35dd1dd2c239d1feb02
SHA512 f1b08bf20a6fac2c6db68d7ffb9fc71875c26d95032715f28521c7996abc12b6a334aa16bff3174f630db297ab1d1ddf65752f4e23a4817231877c40f9ed4fd2
SSDEEP 6144:Kxev4M2Jg+EYZr8iyD2/VfZfNL4WGnpgRRk+aAj89KPbOHNbWe:Wev4M2JsYZpq2/VfZfNL45npAHjSD
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28089893c1d9e756f0ae4af23123ec53_JaffaCakes118

File Explorer

28089893c1d9e756f0ae4af23123ec53_JaffaCakes118

.exe 356KB

28089893c1d9e756f0ae4af23123ec53_JaffaCakes118

IMPHASH 8bbe56be552e64d1269338e4dd3da9ff
SHA256 9084d64fbcd5e6562eb4f80af38be53cd0a13570c5c99609825922556139f290
MD5 28089893c1d9e756f0ae4af23123ec53
SHA1 a71764ef8171820e147da35dd1dd2c239d1feb02
SHA512 f1b08bf20a6fac2c6db68d7ffb9fc71875c26d95032715f28521c7996abc12b6a334aa16bff3174f630db297ab1d1ddf65752f4e23a4817231877c40f9ed4fd2
SSDEEP 6144:Kxev4M2Jg+EYZr8iyD2/VfZfNL4WGnpgRRk+aAj89KPbOHNbWe:Wev4M2JsYZpq2/VfZfNL45npAHjSD
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

24814

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_AGGRESIVE_WS_TRIM IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_SYSTEM

PDB paths

msvbvm60

_CIcos _adj_fptan __vbaStrI4 __vbaVarMove __vbaVarVargNofree __vbaFreeVar __vbaAryMove __vbaLenBstr __vbaStrVarMove __vbaGosubReturn __vbaFreeVarList _adj_fdiv_m64 ord516 _adj_fprem1 __vbaRecAnsiToUni __vbaStrCat __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryDestruct _adj_fdiv_m16i _adj_fdivr_m16i _CIsin ord631 __vbaErase ord632 __vbaVarZero __vbaChkstk __vbaGosubFree __vbaGenerateBoundsError __vbaStrCmp __vbaAryConstruct2 __vbaI2I4 DllFunctionCall __vbaRedimPreserve _adj_fpatan __vbaRedim __vbaRecUniToAnsi __vbaUI1I2 _CIsqrt __vbaUI1I4 __vbaExceptHandler __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 __vbaGosub ord607 __vbaFPException ord717 __vbaUbound __vbaStrVarVal __vbaVarCat ord644 _CIlog __vbaErrorOverflow __vbaNew2 __vbaVar2Vec _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy ord573 __vbaFreeStrList __vbaDerefAry1 _adj_fdivr_m32 _adj_fdiv_r ord100 __vbaAryLock __vbaStrToAnsi __vbaVarDup __vbaFpI4 ord616 _CIatan __vbaStrMove ord618 __vbaUI1Str __vbaStrVarCopy _allmul _CItan __vbaAryUnlock _CIexp __vbaI4ErrVar __vbaFreeStr __vbaFreeObj

Sharing

General

Malware Config

Signatures

File Explorer

28089893c1d9e756f0ae4af23123ec53_JaffaCakes118

msvbvm60

generic