4cd0aa65d375f9edb94986ff5785834d_JaffaCakes118

General

Target
4cd0aa65d375f9edb94986ff5785834d_JaffaCakes118
Size 200KB
Sample240716-e6zbhaxhkb
SHA256 955d5d2bf1cd67196b174dde14c9871b37c72b08777915836cb246b86e3e68ba
MD5 4cd0aa65d375f9edb94986ff5785834d
SHA1 8c3a4811588a9281011542decd827daf028eb4f2
SHA512 07423da446e8dd68873028336a1420567a633646142ce63e7498f60ef94f36b1303c2e8a71ac126300a51a086e58e3126a54b8c2a585a07dd6f05449ac616ace
SSDEEP 6144:jD/SXeNQCJXtEpIE5nVWJVErxIgldFaobgVl:iuNtJXjE5nV2VSldFaobgVl
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4cd0aa65d375f9edb94986ff5785834d_JaffaCakes118

File Explorer

4cd0aa65d375f9edb94986ff5785834d_JaffaCakes118

.exe 200KB

4cd0aa65d375f9edb94986ff5785834d_JaffaCakes118

IMPHASH fa1477b5130483556c596e52b285fe6f
SHA256 955d5d2bf1cd67196b174dde14c9871b37c72b08777915836cb246b86e3e68ba
MD5 4cd0aa65d375f9edb94986ff5785834d
SHA1 8c3a4811588a9281011542decd827daf028eb4f2
SHA512 07423da446e8dd68873028336a1420567a633646142ce63e7498f60ef94f36b1303c2e8a71ac126300a51a086e58e3126a54b8c2a585a07dd6f05449ac616ace
SSDEEP 6144:jD/SXeNQCJXtEpIE5nVWJVErxIgldFaobgVl:iuNtJXjE5nV2VSldFaobgVl
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

11592

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarTstGt __vbaVarSub __vbaStrI2 _CIcos _adj_fptan __vbaStrI4 __vbaVarMove __vbaAryMove __vbaFreeVar __vbaLenBstr __vbaStrVarMove __vbaPut3 __vbaFreeVarList __vbaEnd _adj_fdiv_m64 ord621 __vbaFreeObjList ord516 ord517 __vbaStrErrVarCopy _adj_fprem1 __vbaRecAnsiToUni ord518 ord519 __vbaVarCmpNe __vbaStrCat __vbaError ord660 __vbaLsetFixstr __vbaSetSystemError __vbaLenBstrB __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryVar __vbaAryDestruct __vbaExitProc ord593 ord594 __vbaOnError __vbaObjSet _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord598 __vbaStrFixstr ord520 ord522 __vbaFpR8 __vbaBoolVarNull _CIsin __vbaErase ord631 ord524 ord525 ord632 __vbaChkstk ord526 __vbaFileClose EVENT_SINK_AddRef ord527 __vbaGenerateBoundsError __vbaGet3 ord529 __vbaStrCmp __vbaPutOwner3 __vbaAryConstruct2 __vbaVarTstEq __vbaI2I4 ord561 __vbaObjVar DllFunctionCall __vbaRedimPreserve __vbaStrR4 _adj_fpatan __vbaFixstrConstruct __vbaRedim __vbaRecUniToAnsi EVENT_SINK_Release __vbaNew ord600 __vbaUI1I2 _CIsqrt __vbaVarAnd EVENT_SINK_QueryInterface __vbaUI1I4 __vbaExceptHandler ord711 ord712 __vbaStrToUnicode __vbaPrintFile _adj_fprem _adj_fdivr_m64 ord530 ord608 ord531 __vbaFPException __vbaInStrVar __vbaUbound ord533 __vbaGetOwner3 __vbaStrVarVal __vbaVarCat __vbaI2Var ord537 ord645 _CIlog __vbaErrorOverflow ord647 __vbaFileOpen ord648 ord570 __vbaInStr __vbaR8Str __vbaNew2 _adj_fdiv_m32i ord572 _adj_fdivr_m32i ord573 __vbaStrCopy ord681 __vbaFreeStrList ord576 _adj_fdivr_m32 _adj_fdiv_r ord100 __vbaVarTstNe __vbaI4Var __vbaVarCmpEq __vbaAryLock __vbaLateMemCall __vbaVarAdd __vbaVarDup __vbaStrToAnsi ord613 __vbaFpI2 __vbaFpI4 ord616 __vbaVarCopy ord617 _CIatan __vbaAryCopy ord618 __vbaStrMove __vbaR8IntI4 _allmul _CItan __vbaAryUnlock __vbaUI1Var __vbaFPInt _CIexp __vbaFreeStr __vbaFreeObj ord581

Sharing

General

Malware Config

Signatures

File Explorer

4cd0aa65d375f9edb94986ff5785834d_JaffaCakes118

msvbvm60

generic