47f2889ae88046c66f71993f8e6bfacb_JaffaCakes118

General

Target
47f2889ae88046c66f71993f8e6bfacb_JaffaCakes118
Size 373KB
Sample240715-dlsgsavfmm
SHA256 924095fed29c5bd58d6ff65e669b27a1ffd0910641e5011b54cae76e697367c9
MD5 47f2889ae88046c66f71993f8e6bfacb
SHA1 d389b6a62a4090e4b789e1b5de8636ed62abe8c6
SHA512 60146e61e1be08caadd2bb4128eda381443a69a57f059dec0270073566f1f45b887041e3512ba5fb86195abf80beccc6ba7e2720eef7f29a1ff2389f83de0c02
SSDEEP 6144:uaibqJaEGSC6buYKIRGqKmw/1q2iJo7T5HjfbTG+x6bW:1PIqpo7hzwy
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
47f2889ae88046c66f71993f8e6bfacb_JaffaCakes118

File Explorer

47f2889ae88046c66f71993f8e6bfacb_JaffaCakes118

.exe 373KB

47f2889ae88046c66f71993f8e6bfacb_JaffaCakes118

IMPHASH 5fb6edf56bf0015ae5a1f6475cf074c0
SHA256 924095fed29c5bd58d6ff65e669b27a1ffd0910641e5011b54cae76e697367c9
MD5 47f2889ae88046c66f71993f8e6bfacb
SHA1 d389b6a62a4090e4b789e1b5de8636ed62abe8c6
SHA512 60146e61e1be08caadd2bb4128eda381443a69a57f059dec0270073566f1f45b887041e3512ba5fb86195abf80beccc6ba7e2720eef7f29a1ff2389f83de0c02
SSDEEP 6144:uaibqJaEGSC6buYKIRGqKmw/1q2iJo7T5HjfbTG+x6bW:1PIqpo7hzwy
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10812

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarSub _CIcos _adj_fptan __vbaStrI4 __vbaVarMove __vbaVarVargNofree __vbaFreeVar __vbaAryMove __vbaGosubReturn __vbaLenBstr __vbaStrVarMove __vbaFreeVarList _adj_fdiv_m64 __vbaRaiseEvent __vbaFreeObjList _adj_fprem1 __vbaRecAnsiToUni __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryVar __vbaAryDestruct ord593 __vbaExitProc ord594 __vbaObjSet __vbaOnError _adj_fdiv_m16i _adj_fdivr_m16i __vbaVarIndexLoad __vbaFpR8 __vbaRefVarAry _CIsin ord631 __vbaErase __vbaVarZero __vbaChkstk __vbaGosubFree ord526 __vbaFileClose EVENT_SINK_AddRef __vbaGenerateBoundsError ord529 __vbaStrCmp __vbaGet3 __vbaPutOwner3 __vbaAryConstruct2 __vbaI2I4 DllFunctionCall ord670 __vbaFpUI1 __vbaRedimPreserve __vbaLbound _adj_fpatan __vbaRedim __vbaRecUniToAnsi EVENT_SINK_Release ord601 __vbaUI1I2 _CIsqrt EVENT_SINK_QueryInterface __vbaUI1I4 __vbaExceptHandler ord711 __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 __vbaGosub ord607 ord608 __vbaFPException ord717 __vbaGetOwner3 __vbaUbound __vbaStrVarVal __vbaVarCat ord644 _CIlog __vbaErrorOverflow __vbaFileOpen ord648 __vbaNew2 ord570 __vbaR8Str __vbaVar2Vec _adj_fdiv_m32i _adj_fdivr_m32i ord573 __vbaStrCopy ord681 __vbaFreeStrList __vbaDerefAry1 _adj_fdivr_m32 __vbaPowerR8 _adj_fdiv_r ord578 ord685 ord100 __vbaI4Var __vbaAryLock __vbaStrToAnsi __vbaVarDup __vbaVarCopy __vbaFpI4 ord616 _CIatan ord618 __vbaStrMove __vbaAryCopy __vbaR8IntI4 __vbaStrVarCopy _allmul _CItan __vbaUI1Var __vbaAryUnlock _CIexp __vbaFreeStr __vbaFreeObj ord581

Sharing

General

Malware Config

Signatures

File Explorer

47f2889ae88046c66f71993f8e6bfacb_JaffaCakes118

msvbvm60

generic