5832754ff4d96ca893e8e8c9a8c324bb_JaffaCakes118

General

Target
5832754ff4d96ca893e8e8c9a8c324bb_JaffaCakes118
Size 315KB
Sample240718-t244hsxblm
SHA256 8e72eef3f53f5b149763f3c80b49a68268c5718aac350dddedee3589af10b303
MD5 5832754ff4d96ca893e8e8c9a8c324bb
SHA1 16f9348816b222e8347fadd2284e738ec01c7a1e
SHA512 2dcc8567e20d560cca4309cc9b4baf47220bff35fe2771184ad3c9b72b7647dbe7eb624ba1140c85f0a3580c7b3e5cc42b3dffd8c452083233eb747603315583
SSDEEP 6144:vjawPgCUYqALD4vfQ/WG9cexpasgbwXMnYQSXYAH8:7awiYqALD4OhcWp8bwXuJSoAH8
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5832754ff4d96ca893e8e8c9a8c324bb_JaffaCakes118

File Explorer

5832754ff4d96ca893e8e8c9a8c324bb_JaffaCakes118

.exe 315KB

5832754ff4d96ca893e8e8c9a8c324bb_JaffaCakes118

IMPHASH ffc44a1adf822922bdd8441f83feadf1
SHA256 8e72eef3f53f5b149763f3c80b49a68268c5718aac350dddedee3589af10b303
MD5 5832754ff4d96ca893e8e8c9a8c324bb
SHA1 16f9348816b222e8347fadd2284e738ec01c7a1e
SHA512 2dcc8567e20d560cca4309cc9b4baf47220bff35fe2771184ad3c9b72b7647dbe7eb624ba1140c85f0a3580c7b3e5cc42b3dffd8c452083233eb747603315583
SSDEEP 6144:vjawPgCUYqALD4vfQ/WG9cexpasgbwXMnYQSXYAH8:7awiYqALD4OhcWp8bwXuJSoAH8
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6452

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60.dll

__vbaR8ForNextCheck _CIcos _adj_fptan __vbaVarMove __vbaVarVargNofree __vbaAryMove __vbaFreeVar ord588 __vbaStrVarMove __vbaLateIdCall __vbaLenBstr __vbaFreeVarList _adj_fdiv_m64 __vbaRaiseEvent __vbaFreeObjList ord516 _adj_fprem1 __vbaCopyBytes __vbaStrCat __vbaLsetFixstr __vbaSetSystemError __vbaHresultCheckObj ord665 _adj_fdiv_m32 __vbaAryVar __vbaAryDestruct __vbaLateMemSt ord593 __vbaExitProc ord594 __vbaOnError __vbaObjSet ord595 _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord520 __vbaBoolVarNull �CIsin ord631 __vbaErase __vbaVarZero ord632 __vbaChkstk ord526 __vbaFileClose EVENT_SINK_AddRef __vbaGenerateBoundsError ord529 __vbaGet3 __vbaStrCmp __vbaPutOwner3 __vbaVarTstEq __vbaAryConstruct2 __vbaI2I4 __vbaPrintObj ord561 DllFunctionCall __vbaLbound __vbaRedimPreserve _adj_fpatan __vbaFixstrConstruct __vbaLateIdCallLd __vbaRedim __vbaStrR8 __vbaUI1ErrVar EVENT_SINK_Release __vbaUI1I2 _CIsqrt __vbaVarAnd EVENT_SINK_QueryInterface __vbaUI1I4 __vbaExceptHandler ord711 ord712 __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 ord607 __vbaFPException ord717 __vbaGetOwner3 __vbaUbound __vbaStrVarVal __vbaVarCat ord537 ord644 _CIlog __vbaErrorOverflow __vbaFileOpen ord648 ord570 __vbaVar2Vec __vbaR8Str __vbaNew2 _adj_fdiv_m32i ord572 _adj_fdivr_m32i __vbaStrCopy __vbaFreeStrList __vbaDerefAry1 _adj_fdivr_m32 __vbaPowerR8 _adj_fdiv_r ord578 ord685 ord100 __vbaI4Var __vbaVarCmpEq __vbaLateMemCall __vbaVarAdd __vbaAryLock __vbaVarDup __vbaStrToAnsi ord613 __vbaFpI2 __vbaFpI4 _CIatan __vbaAryCopy __vbaStrMove __vbaR8IntI4 ord619 _allmul __vbaLateIdSt _CItan __vbaAryUnlock _CIexp __vbaI4ErrVar __vbaFreeObj __vbaFreeStr ord581

Sharing

General

Malware Config

Signatures

File Explorer

5832754ff4d96ca893e8e8c9a8c324bb_JaffaCakes118

msvbvm60.dll

generic