39d214d836d43dfd40a46a8469498bf7_JaffaCakes118

General

Target
39d214d836d43dfd40a46a8469498bf7_JaffaCakes118
Size 1.1MB
Sample240711-tjrepstfkl
SHA256 31d773e367fa4e9b5318f39332741bfa9c16527a6ada11190498b643b3b86d48
MD5 39d214d836d43dfd40a46a8469498bf7
SHA1 bdfcfbd6d3599c4c156e7062a21389c950d6f43f
SHA512 a9c76e5132b32f165dec4a6b6d0008053d0376b08d53110c0d3ff858e4568cb5f551f4d57e22330fb36041d735f41a2c92c5ae9a90611a0d0eee309960551bda
SSDEEP 12288:PbF/FrYmJ3mqj6FqZqK1WvR/gS7otG2+4YkRtAEiXco/HCd58G1pP96P/xfihFVq:PbF/FrYmJ3mqw54IoRxyz7fXPBihFy5
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39d214d836d43dfd40a46a8469498bf7_JaffaCakes118

File Explorer

39d214d836d43dfd40a46a8469498bf7_JaffaCakes118

.exe 1.1MB

39d214d836d43dfd40a46a8469498bf7_JaffaCakes118

IMPHASH d151c49fa7981b6debabd192d6cc021f
SHA256 31d773e367fa4e9b5318f39332741bfa9c16527a6ada11190498b643b3b86d48
MD5 39d214d836d43dfd40a46a8469498bf7
SHA1 bdfcfbd6d3599c4c156e7062a21389c950d6f43f
SHA512 a9c76e5132b32f165dec4a6b6d0008053d0376b08d53110c0d3ff858e4568cb5f551f4d57e22330fb36041d735f41a2c92c5ae9a90611a0d0eee309960551bda
SSDEEP 12288:PbF/FrYmJ3mqj6FqZqK1WvR/gS7otG2+4YkRtAEiXco/HCd58G1pP96P/xfihFVq:PbF/FrYmJ3mqw54IoRxyz7fXPBihFy5
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5716

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarSub _CIcos _adj_fptan __vbaStrI4 __vbaVarMove __vbaVarVargNofree __vbaFreeVar __vbaStrVarMove __vbaVarIdiv __vbaEnd __vbaFreeVarList _adj_fdiv_m64 __vbaPut4 _adj_fprem1 ord628 __vbaStrCat __vbaSetSystemError __vbaLenBstrB __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryDestruct __vbaVarForInit ord595 __vbaObjSet __vbaOnError _adj_fdiv_m16i _adj_fdivr_m16i __vbaRefVarAry _CIsin __vbaChkstk __vbaFileClose EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaStrCmp __vbaAryConstruct2 DllFunctionCall __vbaRedimPreserve _adj_fpatan __vbaStrR8 __vbaRedim EVENT_SINK_Release _CIsqrt EVENT_SINK_QueryInterface __vbaVarMul __vbaExceptHandler ord712 __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 __vbaI2Str __vbaFailedFriend __vbaVarDiv __vbaFPException __vbaStrVarVal __vbaUbound __vbaVarCat __vbaI2Var _CIlog __vbaFileOpen __vbaNew2 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaI4Str __vbaFreeStrList __vbaDerefAry1 _adj_fdivr_m32 _adj_fdiv_r ord685 ord100 __vbaI4Var __vbaVarAdd __vbaAryLock __vbaVarDup __vbaStrToAnsi __vbaFpI4 _CIatan __vbaStrMove __vbaStrVarCopy _allmul _CItan __vbaAryUnlock __vbaVarForNext _CIexp __vbaFreeObj __vbaFreeStr

Sharing

General

Malware Config

Signatures

File Explorer

39d214d836d43dfd40a46a8469498bf7_JaffaCakes118

msvbvm60

generic