5a5a4ad98557a8fa01b73475cf6cd006_JaffaCakes118

General

Target
5a5a4ad98557a8fa01b73475cf6cd006_JaffaCakes118
Size 681KB
Sample240719-ednz3a1erm
SHA256 1cbc9adfca577aebbba83f3075e9a768d5fc15347ee8a4bed9758cefb2fb8708
MD5 5a5a4ad98557a8fa01b73475cf6cd006
SHA1 959b8862c3a1b8be480ca52ef8423b4c13ac38c5
SHA512 6e0dd9cbf3e18cf1b35b7dd61e7b92bc56151432d64f660716681e191a9323075c09a262cf0261af65876bd7c4692280a58b97e209d53f582703563d001c47bf
SSDEEP 12288:9/VQY0LjjjjjjjjjjjjjZ1OjlmjjjjjjjjjjjjjZ1Ojk+Iidwv4HUx5Qf4K:YYuOjlSOjk+3dwvT0f
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a5a4ad98557a8fa01b73475cf6cd006_JaffaCakes118

File Explorer

5a5a4ad98557a8fa01b73475cf6cd006_JaffaCakes118

.exe 681KB

5a5a4ad98557a8fa01b73475cf6cd006_JaffaCakes118

IMPHASH ec3b91e430e87eba050dbb43cbf31ee4
SHA256 1cbc9adfca577aebbba83f3075e9a768d5fc15347ee8a4bed9758cefb2fb8708
MD5 5a5a4ad98557a8fa01b73475cf6cd006
SHA1 959b8862c3a1b8be480ca52ef8423b4c13ac38c5
SHA512 6e0dd9cbf3e18cf1b35b7dd61e7b92bc56151432d64f660716681e191a9323075c09a262cf0261af65876bd7c4692280a58b97e209d53f582703563d001c47bf
SSDEEP 12288:9/VQY0LjjjjjjjjjjjjjZ1OjlmjjjjjjjjjjjjjZ1Ojk+Iidwv4HUx5Qf4K:YYuOjlSOjk+3dwvT0f
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

9188

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

EVENT_SINK_GetIDsOfNames __vbaStrI2 _CIcos _adj_fptan __vbaVarMove __vbaStrI4 __vbaVarVargNofree __vbaFreeVar __vbaLateIdCall ord588 __vbaStrVarMove __vbaLenBstr __vbaFreeVarList __vbaEnd _adj_fdiv_m64 EVENT_SINK_Invoke __vbaRaiseEvent __vbaFreeObjList _adj_fprem1 __vbaI2Abs __vbaStrCat __vbaSetSystemError __vbaHresultCheckObj __vbaLenVar _adj_fdiv_m32 __vbaVarTstLe Zombie_GetTypeInfo __vbaAryDestruct EVENT_SINK2_Release __vbaExitProc __vbaI4Abs __vbaOnError __vbaObjSet ord595 _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord598 __vbaBoolVar __vbaBoolVarNull _CIsin ord631 ord709 ord632 __vbaChkstk ord526 EVENT_SINK_AddRef ord528 __vbaGenerateBoundsError ord529 __vbaStrCmp __vbaVarTstEq __vbaAryConstruct2 __vbaPrintObj __vbaI2I4 DllFunctionCall __vbaVarLateMemSt __vbaVarOr __vbaFpUI1 __vbaCastObjVar __vbaRedimPreserve _adj_fpatan __vbaR4Var __vbaLateIdCallLd Zombie_GetTypeInfoCount __vbaRedim EVENT_SINK_Release __vbaNew ord600 __vbaUI1I2 _CIsqrt __vbaObjIs EVENT_SINK_QueryInterface __vbaVarMul __vbaUI1I4 __vbaExceptHandler __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 ord607 __vbaVarDiv ord608 __vbaFPException ord717 __vbaInStrVar ord319 __vbaUbound __vbaStrVarVal __vbaVarCat __vbaI2Var ord644 _CIlog __vbaErrorOverflow __vbaInStr __vbaNew2 _adj_fdiv_m32i _adj_fdivr_m32i ord573 __vbaStrCopy EVENT_SINK2_AddRef __vbaI4Str ord681 __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord685 ord100 __vbaI4Var __vbaVarCmpEq __vbaAryLock ord320 __vbaVarDup __vbaStrToAnsi ord321 __vbaFpI2 ord616 __vbaFpI4 __vbaLateMemCallLd ord617 _CIatan __vbaCastObj __vbaStrMove __vbaR8IntI4 _allmul __vbaLateIdSt _CItan __vbaAryUnlock _CIexp ord580 __vbaFreeObj __vbaFreeStr

Sharing

General

Malware Config

Signatures

File Explorer

5a5a4ad98557a8fa01b73475cf6cd006_JaffaCakes118

msvbvm60

generic