3f419af1c11e94f470b3985f5af994d1_JaffaCakes118

General

Target
3f419af1c11e94f470b3985f5af994d1_JaffaCakes118
Size 800KB
Sample240712-28eq7sxcld
SHA256 fe43a5c92229906e8817b08719aad04bd72a5ab4c81a62d970ebf5d92efe5c40
MD5 3f419af1c11e94f470b3985f5af994d1
SHA1 39ad1e9218b2b1d937e75d878eedfb035c194734
SHA512 731842b2ae7e4c08274138f55b975a54b83f3fac48ed6a7fe82669d2e1272cd5b98ea9f7843f0a6e0b08ff7166d0e99b600104c2e8bfb1ae582e9f8f65ec5442
SSDEEP 24576:8HKFontqGp6q+3Am4B/yW4di61muZcAppXlO80JCYDrGux7:8HKFon36sBgi61muZVJlOptPtx7
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f419af1c11e94f470b3985f5af994d1_JaffaCakes118

File Explorer

3f419af1c11e94f470b3985f5af994d1_JaffaCakes118

.exe 800KB

3f419af1c11e94f470b3985f5af994d1_JaffaCakes118

IMPHASH 24fb929c5b5dce0fe1a7ea35278877c8
SHA256 fe43a5c92229906e8817b08719aad04bd72a5ab4c81a62d970ebf5d92efe5c40
MD5 3f419af1c11e94f470b3985f5af994d1
SHA1 39ad1e9218b2b1d937e75d878eedfb035c194734
SHA512 731842b2ae7e4c08274138f55b975a54b83f3fac48ed6a7fe82669d2e1272cd5b98ea9f7843f0a6e0b08ff7166d0e99b600104c2e8bfb1ae582e9f8f65ec5442
SSDEEP 24576:8HKFontqGp6q+3Am4B/yW4di61muZcAppXlO80JCYDrGux7:8HKFon36sBgi61muZVJlOptPtx7
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5356

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

_CIcos _adj_fptan __vbaVarMove __vbaVarVargNofree __vbaAryMove __vbaFreeVar __vbaLenBstr __vbaStrVarMove __vbaFreeVarList _adj_fdiv_m64 ord516 _adj_fprem1 __vbaStrCat __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryDestruct __vbaOnError _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord598 _CIsin __vbaErase ord632 __vbaVarZero __vbaChkstk EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaStrCmp __vbaAryConstruct2 __vbaI2I4 DllFunctionCall __vbaRedimPreserve _adj_fpatan __vbaStrR8 __vbaRedim __vbaUI1ErrVar EVENT_SINK_Release __vbaUI1I2 _CIsqrt EVENT_SINK_QueryInterface __vbaExceptHandler __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 ord608 __vbaFPException __vbaStrVarVal __vbaUbound __vbaVarCat ord644 _CIlog __vbaErrorOverflow __vbaNew2 __vbaInStr __vbaR8Str _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy ord573 __vbaFreeStrList __vbaDerefAry1 _adj_fdivr_m32 _adj_fdiv_r ord100 __vbaI4Var __vbaAryLock __vbaFpI4 ord617 _CIatan __vbaStrMove __vbaStrVarCopy ord619 _allmul _CItan __vbaAryUnlock _CIexp __vbaMidStmtBstr __vbaFreeStr __vbaI4ErrVar __vbaFreeObj

Sharing

General

Malware Config

Signatures

File Explorer

3f419af1c11e94f470b3985f5af994d1_JaffaCakes118

msvbvm60

generic