3b3da5d5ea2a026890beb330041ea00d_JaffaCakes118

General

Target
3b3da5d5ea2a026890beb330041ea00d_JaffaCakes118
Size 672KB
Sample240712-aazj6szfml
SHA256 7317ef4b388702a2acee453629505031650a2a2d82c5ec87383724165fd45094
MD5 3b3da5d5ea2a026890beb330041ea00d
SHA1 8feb9f22cc72988d606606ed2b22513eb7237a14
SHA512 17297c5fade1c4021f3ab90907731f38c1f1d040e11569d68ea2d97699c1aa8533665df4ecf7b61b2f142a97b210dea3fde6c9aee286da3d16c2e61bbc2426f9
SSDEEP 6144:pV/YVORk0rnb1Pfy6AW6UsQtCAlRrjZUc5bcSCPjcr6VJUuAJjKdsdoxnFkIlDvf:yO3b12UvTP9op7crYUHhQxGIe2J
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b3da5d5ea2a026890beb330041ea00d_JaffaCakes118

File Explorer

3b3da5d5ea2a026890beb330041ea00d_JaffaCakes118

.exe 672KB

3b3da5d5ea2a026890beb330041ea00d_JaffaCakes118

IMPHASH 61978de1f8e37cdbbd85692a8891a086
SHA256 7317ef4b388702a2acee453629505031650a2a2d82c5ec87383724165fd45094
MD5 3b3da5d5ea2a026890beb330041ea00d
SHA1 8feb9f22cc72988d606606ed2b22513eb7237a14
SHA512 17297c5fade1c4021f3ab90907731f38c1f1d040e11569d68ea2d97699c1aa8533665df4ecf7b61b2f142a97b210dea3fde6c9aee286da3d16c2e61bbc2426f9
SSDEEP 6144:pV/YVORk0rnb1Pfy6AW6UsQtCAlRrjZUc5bcSCPjcr6VJUuAJjKdsdoxnFkIlDvf:yO3b12UvTP9op7crYUHhQxGIe2J
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

14004

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

EVENT_SINK_GetIDsOfNames __vbaVarSub _CIcos _adj_fptan __vbaStrI4 __vbaVarMove __vbaVarVargNofree __vbaFreeVar __vbaAryMove __vbaLateIdCall ord588 __vbaLenBstr __vbaStrVarMove __vbaGosubReturn __vbaVarIdiv __vbaFreeVarList _adj_fdiv_m64 EVENT_SINK_Invoke __vbaRaiseEvent __vbaFreeObjList ord516 ord517 _adj_fprem1 __vbaRecAnsiToUni ord519 __vbaCopyBytes __vbaForEachCollAd __vbaStrCat __vbaLsetFixstr __vbaRecDestruct __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryVar Zombie_GetTypeInfo __vbaAryDestruct __vbaStrBool __vbaExitProc __vbaStrLike ord595 __vbaObjSet __vbaOnError ord596 _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord598 ord599 __vbaStrFixstr __vbaBoolVar __vbaBoolVarNull _CIsin ord709 ord631 __vbaErase ord525 ord632 __vbaVarZero __vbaChkstk ord526 __vbaCyVar __vbaGosubFree EVENT_SINK_AddRef ord528 __vbaGenerateBoundsError __vbaExitEachColl __vbaStrCmp __vbaVarTstEq __vbaAryConstruct2 ord561 DllFunctionCall __vbaFpUI1 __vbaCastObjVar __vbaLbound __vbaRedimPreserve _adj_fpatan __vbaLateIdCallLd Zombie_GetTypeInfoCount __vbaRedim __vbaRecUniToAnsi EVENT_SINK_Release __vbaNew _CIsqrt __vbaVarAnd __vbaObjIs EVENT_SINK_QueryInterface __vbaExceptHandler ord711 ord712 __vbaStrToUnicode ord606 _adj_fprem _adj_fdivr_m64 __vbaGosub ord607 ord608 __vbaFPException __vbaInStrVar ord717 ord319 __vbaUbound __vbaStrVarVal __vbaVarCat __vbaCheckType __vbaI2Var ord537 ord644 _CIlog __vbaInStr __vbaNew2 __vbaVar2Vec __vbaCyMulI2 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy ord573 __vbaI4Str ord681 __vbaFreeStrList __vbaDerefAry1 _adj_fdivr_m32 _adj_fdiv_r ord685 ord100 __vbaVarTstNe __vbaI4Var __vbaVarCmpEq __vbaVarAdd __vbaAryLock ord320 __vbaVarDup __vbaStrToAnsi ord321 __vbaFpI2 __vbaVarLateMemCallLd __vbaFpI4 ord616 __vbaLateMemCallLd __vbaRecDestructAnsi ord617 _CIatan __vbaCastObj __vbaAryCopy __vbaStrMove ord618 __vbaI4Cy ord619 __vbaStrVarCopy _allmul __vbaFpCSngR4 __vbaLateIdSt _CItan __vbaNextEachCollAd __vbaFPInt __vbaUI1Var __vbaAryUnlock _CIexp __vbaMidStmtBstr __vbaRecAssign __vbaI4ErrVar __vbaFreeStr __vbaFreeObj ord581

Sharing

General

Malware Config

Signatures

File Explorer

3b3da5d5ea2a026890beb330041ea00d_JaffaCakes118

msvbvm60

generic