3fb7fddcec6db1dc36c2320fbe2f3c53_JaffaCakes118

General

Target
3fb7fddcec6db1dc36c2320fbe2f3c53_JaffaCakes118
Size 680KB
Sample240713-b8jr2ssgla
SHA256 39dcb0bfe7b0976c8fde15932b6a35ecbaea875f33ef57d1b6872874607ac374
MD5 3fb7fddcec6db1dc36c2320fbe2f3c53
SHA1 87f343d25e941c236a683a74a5754f8bf40ce750
SHA512 1f5b79d225e7894fdc72f49136d2662d8a030ad75f27a355e6021f136061dfc768f2d13403a96845e2fd2eab22490b9de8f6dbc76933c0eec86557e3ac99a135
SSDEEP 12288:jClephVMo7IYJAB++2RrxRAjbeNC2v+clES+vYOqH:uOhKpYyB/MrxRAZMES+b+
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3fb7fddcec6db1dc36c2320fbe2f3c53_JaffaCakes118

File Explorer

3fb7fddcec6db1dc36c2320fbe2f3c53_JaffaCakes118

.exe 680KB

3fb7fddcec6db1dc36c2320fbe2f3c53_JaffaCakes118

IMPHASH 8e07dbaf3241ecdafbc8341041292946
SHA256 39dcb0bfe7b0976c8fde15932b6a35ecbaea875f33ef57d1b6872874607ac374
MD5 3fb7fddcec6db1dc36c2320fbe2f3c53
SHA1 87f343d25e941c236a683a74a5754f8bf40ce750
SHA512 1f5b79d225e7894fdc72f49136d2662d8a030ad75f27a355e6021f136061dfc768f2d13403a96845e2fd2eab22490b9de8f6dbc76933c0eec86557e3ac99a135
SSDEEP 12288:jClephVMo7IYJAB++2RrxRAjbeNC2v+clES+vYOqH:uOhKpYyB/MrxRAZMES+b+
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5868

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaStrI2 _CIcos _adj_fptan __vbaFreeVar __vbaAryMove __vbaStrVarMove __vbaLenBstr __vbaEnd __vbaFreeVarList _adj_fdiv_m64 __vbaFreeObjList _adj_fprem1 ord518 __vbaStrCat __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryDestruct __vbaVarForInit __vbaExitProc __vbaOnError __vbaObjSet _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord598 __vbaBoolVar ord520 _CIsin ord631 ord709 __vbaChkstk ord633 __vbaFileClose EVENT_SINK_AddRef __vbaGenerateBoundsError ord528 __vbaPutOwner3 __vbaAryConstruct2 __vbaI2I4 DllFunctionCall __vbaRedimPreserve _adj_fpatan __vbaRedim EVENT_SINK_Release __vbaUI1I2 _CIsqrt EVENT_SINK_QueryInterface __vbaExceptHandler ord711 __vbaStrToUnicode ord712 _adj_fprem _adj_fdivr_m64 ord607 __vbaFPException ord717 __vbaUbound ord644 ord537 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaVar2Vec __vbaNew2 __vbaInStr _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord685 ord100 __vbaI4Var __vbaAryLock __vbaStrToAnsi __vbaFpI4 __vbaLateMemCallLd ord617 _CIatan __vbaStrMove ord619 _allmul _CItan __vbaAryUnlock __vbaVarForNext _CIexp __vbaFreeStr __vbaFreeObj

Sharing

General

Malware Config

Signatures

File Explorer

3fb7fddcec6db1dc36c2320fbe2f3c53_JaffaCakes118

msvbvm60

generic