6a06c2f7ee1f2c2f3fb5ef389016ffb5_JaffaCakes118

General

Target
6a06c2f7ee1f2c2f3fb5ef389016ffb5_JaffaCakes118
Size 392KB
Sample240724-dmktbsvdnl
SHA256 eec9bd8bb71209e9876c4cad62afbad68d0e9eb90b6f4e957d2ced59f3da3c9e
MD5 6a06c2f7ee1f2c2f3fb5ef389016ffb5
SHA1 c2b91e91f129c871dcae963258b53238cdcd09a7
SHA512 fd51efd7bed16e15f43666a7421827c1f64d2bcda4d2e7652844547839764411040cca5ccbceb7fff3dffdee160b29293fb96553f8a1345c26282147178043bf
SSDEEP 12288:CJQp0Z3aEHMgDZnxaTu+4cc2N/97rw9AGHdNa:xmqEHMgNTnS7rw9AGq
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a06c2f7ee1f2c2f3fb5ef389016ffb5_JaffaCakes118

File Explorer

6a06c2f7ee1f2c2f3fb5ef389016ffb5_JaffaCakes118

.exe 392KB

6a06c2f7ee1f2c2f3fb5ef389016ffb5_JaffaCakes118

IMPHASH 4467fe3d4f797cc6bf4604e424cdca78
SHA256 eec9bd8bb71209e9876c4cad62afbad68d0e9eb90b6f4e957d2ced59f3da3c9e
MD5 6a06c2f7ee1f2c2f3fb5ef389016ffb5
SHA1 c2b91e91f129c871dcae963258b53238cdcd09a7
SHA512 fd51efd7bed16e15f43666a7421827c1f64d2bcda4d2e7652844547839764411040cca5ccbceb7fff3dffdee160b29293fb96553f8a1345c26282147178043bf
SSDEEP 12288:CJQp0Z3aEHMgDZnxaTu+4cc2N/97rw9AGHdNa:xmqEHMgNTnS7rw9AGq
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10088

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

_CIcos _adj_fptan __vbaVarMove __vbaStrI4 __vbaVarVargNofree __vbaFreeVar __vbaLenBstr __vbaStrVarMove ord588 __vbaLateIdCall __vbaFreeVarList _adj_fdiv_m64 __vbaRaiseEvent __vbaFreeObjList ord517 _adj_fprem1 __vbaRecAnsiToUni __vbaCopyBytes __vbaStrCat __vbaSetSystemError __vbaLenBstrB __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryDestruct __vbaLateMemSt ord591 ord592 __vbaExitProc __vbaI4Abs ord595 __vbaOnError __vbaObjSet _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord598 ord599 __vbaStrFixstr __vbaBoolVar __vbaFpR8 _CIsin __vbaErase ord709 ord631 __vbaChkstk EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaStrCmp __vbaAryConstruct2 __vbaI2I4 DllFunctionCall __vbaVarOr __vbaFpUI1 __vbaCastObjVar __vbaRedimPreserve _adj_fpatan __vbaR4Var __vbaLateIdCallLd __vbaRedim __vbaRecUniToAnsi EVENT_SINK_Release __vbaNew __vbaUI1I2 _CIsqrt __vbaObjIs EVENT_SINK_QueryInterface __vbaUI1I4 __vbaVarMul __vbaExceptHandler __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 __vbaVarDiv __vbaFPException ord717 __vbaUbound __vbaCheckType __vbaLsetFixstrFree __vbaI2Var ord644 _CIlog __vbaErrorOverflow __vbaVarLateMemCallLdRf __vbaNew2 _adj_fdiv_m32i ord572 _adj_fdivr_m32i __vbaStrCopy ord681 __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord685 ord100 __vbaVarTstNe __vbaI4Var __vbaAryLock __vbaStrComp __vbaStrToAnsi __vbaVarDup __vbaFpI2 ord614 __vbaCheckTypeVar __vbaVarLateMemCallLd __vbaFpI4 __vbaRecDestructAnsi __vbaLateMemCallLd _CIatan __vbaAryCopy __vbaCastObj __vbaStrMove _allmul __vbaLateIdSt __vbaLenVarB _CItan __vbaFPInt __vbaAryUnlock _CIexp __vbaFreeStr __vbaFreeObj ord581

Sharing

General

Malware Config

Signatures

File Explorer

6a06c2f7ee1f2c2f3fb5ef389016ffb5_JaffaCakes118

msvbvm60

generic