3b3c66400f4065bc113178a065a42a79_JaffaCakes118

General

Target
3b3c66400f4065bc113178a065a42a79_JaffaCakes118
Size 332KB
Sample240711-313zhasenc
SHA256 89701a1f12c5d3dfcb992dbf13bcd487152ccea3b5ea7c753261b04604e8c8cf
MD5 3b3c66400f4065bc113178a065a42a79
SHA1 47ba9ce1ec38d1ba4753bd5d6a814202a188da32
SHA512 fac1dcafea097c11956f912a08da7351eb894f3e7618165b6c5dc9da8c8ce9a670b1ac02b136da6a35d34d966127a3ca5e544210031ac47fc491849a157641bd
SSDEEP 6144:KXjuCLBCmY31pe56p6WbOV3hYrpbFdBBdxiRqeiYWjSc5bVhuv:1CtC7CAgVV3hYrJDuoepWechuv
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b3c66400f4065bc113178a065a42a79_JaffaCakes118

File Explorer

3b3c66400f4065bc113178a065a42a79_JaffaCakes118

.exe 332KB

3b3c66400f4065bc113178a065a42a79_JaffaCakes118

IMPHASH 674182f28f242ff083deac3f08530940
SHA256 89701a1f12c5d3dfcb992dbf13bcd487152ccea3b5ea7c753261b04604e8c8cf
MD5 3b3c66400f4065bc113178a065a42a79
SHA1 47ba9ce1ec38d1ba4753bd5d6a814202a188da32
SHA512 fac1dcafea097c11956f912a08da7351eb894f3e7618165b6c5dc9da8c8ce9a670b1ac02b136da6a35d34d966127a3ca5e544210031ac47fc491849a157641bd
SSDEEP 6144:KXjuCLBCmY31pe56p6WbOV3hYrpbFdBBdxiRqeiYWjSc5bVhuv:1CtC7CAgVV3hYrJDuoepWechuv
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5156

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA

msvbvm60.dll

_CIcos _adj_fptan __vbaStrI4 __vbaVarMove __vbaAryMove __vbaFreeVar __vbaLenBstr __vbaStrVarMove __vbaFreeVarList _adj_fdiv_m64 ord516 _adj_fprem1 __vbaLsetFixstr __vbaSetSystemError __vbaVargVarCopy _adj_fdiv_m32 __vbaAryVar __vbaAryDestruct __vbaOnError _adj_fdiv_m16i _adj_fdivr_m16i _CIsin ord631 __vbaErase __vbaVarZero __vbaChkstk __vbaFileClose EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaGet3 __vbaAryConstruct2 __vbaI2I4 DllFunctionCall ord563 __vbaLbound __vbaRedimPreserve _adj_fpatan __vbaFixstrConstruct __vbaRedim EVENT_SINK_Release __vbaUI1I2 _CIsqrt EVENT_SINK_QueryInterface __vbaUI1I4 __vbaExceptHandler ord711 __vbaStrToUnicode ord712 ord606 _adj_fprem _adj_fdivr_m64 ord608 __vbaFPException ord717 __vbaUbound __vbaVarCat ord644 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaVar2Vec _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaI4Str __vbaFreeStrList __vbaDerefAry1 _adj_fdivr_m32 _adj_fdiv_r ord578 ord100 __vbaAryLock __vbaVarDup __vbaStrToAnsi __vbaAryVarVarg __vbaVarCopy _CIatan __vbaStrMove __vbaAryCopy _allmul _CItan __vbaAryUnlock _CIexp __vbaI4ErrVar __vbaFreeStr

Sharing

General

Malware Config

Signatures

File Explorer

3b3c66400f4065bc113178a065a42a79_JaffaCakes118

kernel32

msvbvm60.dll

generic