52d02a72900b52d6e651586ec9e2a4a5_JaffaCakes118

General

Target
52d02a72900b52d6e651586ec9e2a4a5_JaffaCakes118
Size 322KB
Sample240717-nsa67ayerr
SHA256 31659e5c98b61d421729722d2c38fce35b883b70bc473c7afe6f68c209612515
MD5 52d02a72900b52d6e651586ec9e2a4a5
SHA1 d34dffca810cb12f5f301831dad35b56e5f3106f
SHA512 d2007f45e86d7877a22ab054bbc146bac57290548b391fc0706d94645f96cf0fb0c7ca2b009296736c030c07b195a51cf57addf6374b354a7e31ea605fb41c37
SSDEEP 6144:pVROXSLyKqSkmrROSIsZKTqWfJPaa34pCrVv5yEsT2FKRZ89K+v9:PROX0y9m4SIpBftv3DxvgEs65dl
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
52d02a72900b52d6e651586ec9e2a4a5_JaffaCakes118

File Explorer

52d02a72900b52d6e651586ec9e2a4a5_JaffaCakes118

.exe 322KB

52d02a72900b52d6e651586ec9e2a4a5_JaffaCakes118

IMPHASH a733bf624fea0f0379aa800d950a4408
SHA256 31659e5c98b61d421729722d2c38fce35b883b70bc473c7afe6f68c209612515
MD5 52d02a72900b52d6e651586ec9e2a4a5
SHA1 d34dffca810cb12f5f301831dad35b56e5f3106f
SHA512 d2007f45e86d7877a22ab054bbc146bac57290548b391fc0706d94645f96cf0fb0c7ca2b009296736c030c07b195a51cf57addf6374b354a7e31ea605fb41c37
SSDEEP 6144:pVROXSLyKqSkmrROSIsZKTqWfJPaa34pCrVv5yEsT2FKRZ89K+v9:PROX0y9m4SIpBftv3DxvgEs65dl
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5352

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60.dll

_CIcos _adj_fptan __vbaVarMove __vbaVarVargNofree __vbaAryMove __vbaFreeVar __vbaStrVarMove __vbaLenBstr __vbaFreeVarList _adj_fdiv_m64 __vbaNextEachVar __vbaRaiseEvent __vbaFreeObjList _adj_fprem1 __vbaStrCat __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryDestruct __vbaOnError _adj_fdiv_m16i _adj_fdivr_m16i __vbaVarIndexLoad _CIsin __vbaErase __vbaVarZero __vbaChkstk ord526 __vbaFileClose EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaGet3 __vbaStrCmp __vbaAryConstruct2 __vbaI2I4 DllFunctionCall _adj_fpatan __vbaRedim __vbaUI1ErrVar EVENT_SINK_Release ord601 __vbaUI1I2 _CIsqrt EVENT_SINK_QueryInterface __vbaExceptHandler ord711 __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 __vbaFPException ord717 __vbaUbound ord644 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaNew2 ord570 __vbaVar2Vec _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord100 __vbaAryLock __vbaVarDup __vbaStrToAnsi __vbaFpI4 _CIatan __vbaStrMove __vbaForEachVar __vbaR8IntI4 _allmul _CItan __vbaAryUnlock _CIexp __vbaFreeObj __vbaI4ErrVar __vbaFreeStr

Sharing

General

Malware Config

Signatures

File Explorer

52d02a72900b52d6e651586ec9e2a4a5_JaffaCakes118

msvbvm60.dll

generic