59ae51105cb24b652f5ff2a4c3121104_JaffaCakes118

General

Target
59ae51105cb24b652f5ff2a4c3121104_JaffaCakes118
Size 973KB
Sample240719-ahn4eawgpd
SHA256 482ca37b403c105b22c4c4bdc567b0e835bc4d9cae433ddc04ae825ec67a97c1
MD5 59ae51105cb24b652f5ff2a4c3121104
SHA1 abb0e6097a0e1be436a3702168ca8acd70666e93
SHA512 0519b07c98765dabfedb675b1a1f3810f6e46f5e4138615e674be604b335802bbdda24cc8f19c481166d6454aa1049d26d7ca9ed786c65808a4a5d0a4f48a043
SSDEEP 24576:aAHXFZE4q5h4midrO7P4Vks+rhQCEeFdbZLvR6:bVZE4q5umcrWP4Vn+rhQuFHE
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
59ae51105cb24b652f5ff2a4c3121104_JaffaCakes118

File Explorer

59ae51105cb24b652f5ff2a4c3121104_JaffaCakes118

.exe 973KB

59ae51105cb24b652f5ff2a4c3121104_JaffaCakes118

IMPHASH e3cde87dc394906b04d3d2ee2de9278a
SHA256 482ca37b403c105b22c4c4bdc567b0e835bc4d9cae433ddc04ae825ec67a97c1
MD5 59ae51105cb24b652f5ff2a4c3121104
SHA1 abb0e6097a0e1be436a3702168ca8acd70666e93
SHA512 0519b07c98765dabfedb675b1a1f3810f6e46f5e4138615e674be604b335802bbdda24cc8f19c481166d6454aa1049d26d7ca9ed786c65808a4a5d0a4f48a043
SSDEEP 24576:aAHXFZE4q5h4midrO7P4Vks+rhQCEeFdbZLvR6:bVZE4q5umcrWP4Vn+rhQuFHE
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6980

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

EVENT_SINK_GetIDsOfNames __vbaVarSub __vbaR8ForNextCheck _CIcos _adj_fptan __vbaVarMove __vbaStrI4 __vbaVarVargNofree __vbaAryMove __vbaFreeVar __vbaLenBstr __vbaLateIdCall __vbaStrVarMove __vbaFreeVarList _adj_fdiv_m64 __vbaFpCDblR8 EVENT_SINK_Invoke __vbaRaiseEvent __vbaFreeObjList ord516 _adj_fprem1 __vbaRecAnsiToUni __vbaStrCat ord660 __vbaLsetFixstr __vbaStrDate __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryVar Zombie_GetTypeInfo __vbaAryDestruct __vbaExitProc ord593 __vbaForEachCollObj ord300 ord594 ord301 __vbaOnError __vbaObjSet ord595 ord302 ord596 _adj_fdiv_m16i ord303 __vbaObjSetAddref _adj_fdivr_m16i __vbaVarIndexLoad ord598 ord306 ord520 __vbaStrFixstr ord307 ord308 ord309 __vbaRefVarAry _CIsin ord631 __vbaErase __vbaVarZero ord525 ord632 __vbaNextEachCollObj __vbaChkstk ord526 __vbaFileClose EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaGet3 ord529 __vbaStrCmp __vbaAryConstruct2 __vbaPutOwner3 __vbaDateR8 __vbaObjVar __vbaI2I4 DllFunctionCall __vbaCastObjVar __vbaLbound __vbaRedimPreserve _adj_fpatan __vbaR4Var __vbaFixstrConstruct __vbaLateIdCallLd Zombie_GetTypeInfoCount __vbaRedim __vbaR8Cy __vbaRecUniToAnsi EVENT_SINK_Release __vbaNew ord601 __vbaUI1I2 _CIsqrt __vbaObjIs EVENT_SINK_QueryInterface __vbaExceptHandler ord711 __vbaStrToUnicode ord712 _adj_fprem _adj_fdivr_m64 __vbaI2Str ord607 ord608 ord716 __vbaFPException ord717 __vbaInStrVar ord319 __vbaUbound __vbaStrVarVal __vbaGetOwner3 __vbaVarCat ord535 ord644 __vbaFileSeek ord537 _CIlog __vbaErrorOverflow __vbaFileOpen ord648 __vbaVar2Vec __vbaNew2 ord570 _adj_fdiv_m32i ord572 _adj_fdivr_m32i __vbaStrCopy ord681 __vbaFreeStrList _adj_fdivr_m32 __vbaR8Var _adj_fdiv_r ord578 ord685 ord100 __vbaVarSetVar __vbaI4Var __vbaVarAdd __vbaAryLock ord320 __vbaVarDup __vbaStrToAnsi ord321 ord616 __vbaVarLateMemCallLd __vbaVarCopy __vbaFpI4 __vbaLateMemCallLd ord617 _CIatan __vbaAryCopy __vbaStrMove __vbaCastObj __vbaR8IntI4 _allmul __vbaLateIdSt _CItan __vbaUI1Var __vbaAryUnlock _CIexp __vbaMidStmtBstr __vbaI4ErrVar __vbaFreeObj __vbaFreeStr ord581

Sharing

General

Malware Config

Signatures

File Explorer

59ae51105cb24b652f5ff2a4c3121104_JaffaCakes118

msvbvm60

generic