2ecd96bb0ad550c50687b612617a2626_JaffaCakes118

General

Target
2ecd96bb0ad550c50687b612617a2626_JaffaCakes118
Size 442KB
Sample240709-drlanawbmg
SHA256 a948c5aaeb23903d22a493268ec9fd43c2e44c6292085a9912918af528efcc6a
MD5 2ecd96bb0ad550c50687b612617a2626
SHA1 3cec3157cd5815248113e45e78377451aa7b7e28
SHA512 587b76fa25821e505275fe970ab86b7f22e34d868fca188390d03201272d5ac8ca5320abb1893d3c4059f67bbd5dc970427abbcdda7272d909ff804a092426dc
SSDEEP 6144:ftOjSNLzdYDZ0LRDBbTUQzf2/kQaeA9Hzl43a0ar4ypv/GP70DPI9VpDbj7N:VOuSSTnUQzzdTCar4ypmP7xbj7N
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ecd96bb0ad550c50687b612617a2626_JaffaCakes118

File Explorer

2ecd96bb0ad550c50687b612617a2626_JaffaCakes118

.exe 442KB

2ecd96bb0ad550c50687b612617a2626_JaffaCakes118

IMPHASH 0763908926381961200401c4e2c86f2a
SHA256 a948c5aaeb23903d22a493268ec9fd43c2e44c6292085a9912918af528efcc6a
MD5 2ecd96bb0ad550c50687b612617a2626
SHA1 3cec3157cd5815248113e45e78377451aa7b7e28
SHA512 587b76fa25821e505275fe970ab86b7f22e34d868fca188390d03201272d5ac8ca5320abb1893d3c4059f67bbd5dc970427abbcdda7272d909ff804a092426dc
SSDEEP 6144:ftOjSNLzdYDZ0LRDBbTUQzf2/kQaeA9Hzl43a0ar4ypv/GP70DPI9VpDbj7N:VOuSSTnUQzzdTCar4ypmP7xbj7N
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6064

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

_CIcos _adj_fptan __vbaStrI4 __vbaVarMove __vbaVarVargNofree __vbaAryMove __vbaFreeVar __vbaLateIdCall __vbaGosubReturn __vbaStrVarMove __vbaLenBstr __vbaFreeVarList _adj_fdiv_m64 __vbaFreeObjList ord516 _adj_fprem1 __vbaRecAnsiToUni __vbaStrCat __vbaLsetFixstr __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryVar __vbaAryDestruct __vbaOnError __vbaObjSet _adj_fdiv_m16i ord303 __vbaObjSetAddref _adj_fdivr_m16i __vbaBoolVar __vbaStrFixstr ord309 __vbaRefVarAry _CIsin ord631 __vbaErase __vbaVarZero ord632 __vbaChkstk __vbaGosubFree ord526 __vbaFileClose EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaStrCmp __vbaGet3 __vbaAryConstruct2 ord561 DllFunctionCall _adj_fpatan __vbaLateIdCallLd __vbaRedim __vbaRecUniToAnsi EVENT_SINK_Release __vbaNew _CIsqrt EVENT_SINK_QueryInterface __vbaExceptHandler ord711 __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 __vbaGosub ord607 ord608 __vbaFPException ord717 __vbaUbound __vbaStrVarVal __vbaVarCat __vbaLsetFixstrFree ord537 ord644 _CIlog __vbaFileOpen __vbaNew2 ord570 __vbaVar2Vec _adj_fdiv_m32i _adj_fdivr_m32i ord573 __vbaStrCopy ord681 __vbaFreeStrList __vbaDerefAry1 _adj_fdivr_m32 _adj_fdiv_r ord685 ord100 __vbaI4Var __vbaAryLock __vbaStrToAnsi __vbaVarDup __vbaVarCopy __vbaFpI4 _CIatan __vbaCastObj ord618 __vbaUI1Str __vbaStrMove __vbaAryCopy __vbaStrVarCopy _allmul __vbaLateIdSt _CItan __vbaUI1Var __vbaAryUnlock _CIexp __vbaFreeObj __vbaFreeStr ord581

Sharing

General

Malware Config

Signatures

File Explorer

2ecd96bb0ad550c50687b612617a2626_JaffaCakes118

msvbvm60

generic