654499039bf1ff42517df80838fe99ab_JaffaCakes118

General

Target
654499039bf1ff42517df80838fe99ab_JaffaCakes118
Size 3.4MB
Sample240722-3mmqcsvcma
SHA256 929942325fc37a4effef061a7533af2696012025f59fda842805dd1b57b89fe5
MD5 654499039bf1ff42517df80838fe99ab
SHA1 118944e70f2eba872846012c0324a0123d770ad8
SHA512 c4e9a1704af43c1b235c03312e3b1f989a370306c301fdba85aaa299ad50b1ba7cfc9318ae0d40ff64f0ee0272d46764d67a0de442bd2c8ebcff027480a9bb11
SSDEEP 49152:K1nOg6TICIjf5NppOZBv3CMVGwBlxaOfJd7h/eyDPngBy8I7YlWq4c4RveLAaSc/:inaof9s1Iw7VJ9h/J7nai+vGR2Lqcse
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
654499039bf1ff42517df80838fe99ab_JaffaCakes118

File Explorer

654499039bf1ff42517df80838fe99ab_JaffaCakes118

.exe 3.4MB

654499039bf1ff42517df80838fe99ab_JaffaCakes118

IMPHASH ab0bb9d83bd3ff327e39a013eb2b1f48
SHA256 929942325fc37a4effef061a7533af2696012025f59fda842805dd1b57b89fe5
MD5 654499039bf1ff42517df80838fe99ab
SHA1 118944e70f2eba872846012c0324a0123d770ad8
SHA512 c4e9a1704af43c1b235c03312e3b1f989a370306c301fdba85aaa299ad50b1ba7cfc9318ae0d40ff64f0ee0272d46764d67a0de442bd2c8ebcff027480a9bb11
SSDEEP 49152:K1nOg6TICIjf5NppOZBv3CMVGwBlxaOfJd7h/eyDPngBy8I7YlWq4c4RveLAaSc/:inaof9s1Iw7VJ9h/J7nai+vGR2Lqcse
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

7636

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

_CIcos _adj_fptan __vbaVarMove __vbaVarVargNofree __vbaFreeVar __vbaAryMove __vbaStrVarMove __vbaLenBstr __vbaFreeVarList __vbaEnd _adj_fdiv_m64 __vbaRaiseEvent _adj_fprem1 ord518 __vbaRecAnsiToUni __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 ord666 __vbaAryDestruct __vbaExitProc __vbaOnError __vbaObjSet _adj_fdiv_m16i _adj_fdivr_m16i __vbaFpR8 __vbaBoolVarNull _CIsin __vbaErase ord631 __vbaVarZero __vbaChkstk EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaStrCmp __vbaAryConstruct2 DllFunctionCall __vbaVarOr __vbaLbound __vbaRedimPreserve _adj_fpatan __vbaRedim __vbaRecUniToAnsi EVENT_SINK_Release __vbaUI1I2 _CIsqrt __vbaVarAnd EVENT_SINK_QueryInterface __vbaStr2Vec __vbaUI1I4 __vbaExceptHandler ord712 __vbaStrToUnicode ord713 _adj_fprem _adj_fdivr_m64 __vbaFPException ord717 __vbaUbound __vbaStrVarVal ord644 _CIlog __vbaErrorOverflow __vbaNew2 __vbaVar2Vec __vbaInStr _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy ord681 __vbaFreeStrList _adj_fdivr_m32 __vbaPowerR8 _adj_fdiv_r ord578 ord685 ord100 __vbaI4Var __vbaVarCmpEq __vbaAryLock __vbaVarDup __vbaStrToAnsi __vbaFpI4 ord616 _CIatan __vbaStrMove __vbaR8IntI4 _allmul _CItan __vbaAryUnlock _CIexp __vbaFreeObj __vbaFreeStr __vbaI4ErrVar

Sharing

General

Malware Config

Signatures

File Explorer

654499039bf1ff42517df80838fe99ab_JaffaCakes118

msvbvm60

generic