2c16a6b38a6c2fbc9d01bc0b27bb7098_JaffaCakes118

General

Target
2c16a6b38a6c2fbc9d01bc0b27bb7098_JaffaCakes118
Size 117KB
Sample240708-m7deeswblk
SHA256 a76b7641d3945620dc36bd56d5703f69c928d5d859b78e0d0a6b32cb6e9a9db7
MD5 2c16a6b38a6c2fbc9d01bc0b27bb7098
SHA1 cea603ad064d6c9b4cdedab079114fac41db7c0b
SHA512 bb8c3df795d8abefe59aa0579bacb170d612eeff4f49c081367413a2d67d3e6e7b5c3837c87c1053b768512aa891a12340e62e419b24f1c4ddfc00a05fbf01be
SSDEEP 1536:7KTmbLS2mb5fy/um6qTDmJmbLS2mbGSA1EJfu3LufA2wdd0/v:EGuc6qiG5SAWubAKD0/v
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c16a6b38a6c2fbc9d01bc0b27bb7098_JaffaCakes118

File Explorer

2c16a6b38a6c2fbc9d01bc0b27bb7098_JaffaCakes118

.exe 117KB

2c16a6b38a6c2fbc9d01bc0b27bb7098_JaffaCakes118

IMPHASH 910f6052052effb7bb429ce7085e6f2a
SHA256 a76b7641d3945620dc36bd56d5703f69c928d5d859b78e0d0a6b32cb6e9a9db7
MD5 2c16a6b38a6c2fbc9d01bc0b27bb7098
SHA1 cea603ad064d6c9b4cdedab079114fac41db7c0b
SHA512 bb8c3df795d8abefe59aa0579bacb170d612eeff4f49c081367413a2d67d3e6e7b5c3837c87c1053b768512aa891a12340e62e419b24f1c4ddfc00a05fbf01be
SSDEEP 1536:7KTmbLS2mb5fy/um6qTDmJmbLS2mbGSA1EJfu3LufA2wdd0/v:EGuc6qiG5SAWubAKD0/v
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5288

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleFileNameA

msvbvm60

_CIcos _adj_fptan __vbaVarMove __vbaVarVargNofree __vbaFreeVar __vbaAryMove __vbaStrVarMove __vbaLenBstr __vbaFreeVarList _adj_fdiv_m64 __vbaRaiseEvent __vbaNextEachVar _adj_fprem1 __vbaCopyBytes __vbaLsetFixstr __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryDestruct _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i _CIsin __vbaErase ord631 __vbaVarZero __vbaChkstk __vbaFileClose EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaGet3 __vbaStrCmp __vbaAryConstruct2 __vbaI2I4 __vbaObjVar DllFunctionCall ord670 __vbaLbound __vbaRedimPreserve _adj_fpatan __vbaFixstrConstruct __vbaRedim EVENT_SINK_Release __vbaUI1I2 ord601 _CIsqrt EVENT_SINK_QueryInterface __vbaUI1I4 __vbaStr2Vec __vbaExceptHandler __vbaStrToUnicode ord712 ord606 _adj_fprem _adj_fdivr_m64 ord608 ord716 __vbaFPException ord717 __vbaUbound __vbaStrVarVal __vbaVarCat ord644 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaNew2 __vbaVar2Vec __vbaInStr _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaI4Str __vbaFreeStrList _adj_fdivr_m32 __vbaR8Var _adj_fdiv_r ord578 ord100 __vbaVarSetVar __vbaI4Var __vbaAryLock __vbaVarDup __vbaStrToAnsi __vbaFpI4 __vbaVarCopy __vbaVarLateMemCallLd __vbaLateMemCallLd _CIatan __vbaStrMove __vbaR8IntI4 __vbaForEachVar _allmul _CItan __vbaUI1Var __vbaAryUnlock _CIexp __vbaFreeStr __vbaFreeObj

Sharing

General

Malware Config

Signatures

File Explorer

2c16a6b38a6c2fbc9d01bc0b27bb7098_JaffaCakes118

kernel32

msvbvm60

generic