6ab6671c9fbba06f36bf4f655d03f498_JaffaCakes118

General

Target
6ab6671c9fbba06f36bf4f655d03f498_JaffaCakes118
Size 438KB
Sample240724-h54rdaxcpd
SHA256 4d5b4eea780ab2393d06f02fc1a6b5f3c490ddd8d768271b7534b75072aaf023
MD5 6ab6671c9fbba06f36bf4f655d03f498
SHA1 02cb1d74714793c5ec3702ca3afbeb45ee7c0588
SHA512 275251629f1022d9cb330d4e91b614b871892e1a0cebaa533275dca0f3e6558316c039469bb5ce12f2807638bff23e7ef8c93933bd2a463d0f361922ed8f356d
SSDEEP 3072:ySgW8stAeW4guBOvffu6Em5sK4gMs4oFT89lwYX7aVKiEgQ0evwqdV1cxCc8:ZgW8CGu6/yKLLFTKEVKiEg78jcxJ8
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6ab6671c9fbba06f36bf4f655d03f498_JaffaCakes118

File Explorer

6ab6671c9fbba06f36bf4f655d03f498_JaffaCakes118

.exe 438KB

6ab6671c9fbba06f36bf4f655d03f498_JaffaCakes118

IMPHASH fd665c8501eb1a152d6b80cff0d63b33
SHA256 4d5b4eea780ab2393d06f02fc1a6b5f3c490ddd8d768271b7534b75072aaf023
MD5 6ab6671c9fbba06f36bf4f655d03f498
SHA1 02cb1d74714793c5ec3702ca3afbeb45ee7c0588
SHA512 275251629f1022d9cb330d4e91b614b871892e1a0cebaa533275dca0f3e6558316c039469bb5ce12f2807638bff23e7ef8c93933bd2a463d0f361922ed8f356d
SSDEEP 3072:ySgW8stAeW4guBOvffu6Em5sK4gMs4oFT89lwYX7aVKiEgQ0evwqdV1cxCc8:ZgW8CGu6/yKLLFTKEVKiEg78jcxJ8
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

9972

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarSub __vbaVarTstGt ord582 ord583 __vbaStrI2 _CIcos _adj_fptan __vbaVarMove __vbaStrI4 ord693 __vbaVarVargNofree __vbaAryMove __vbaFreeVar __vbaLateIdCall ord588 __vbaLenBstr __vbaStrVarMove __vbaEnd __vbaPut3 __vbaFreeVarList _adj_fdiv_m64 __vbaFpCDblR8 __vbaPut4 ord620 ord621 __vbaRaiseEvent __vbaFreeObjList ord516 ord517 _adj_fprem1 __vbaRecAnsiToUni ord519 __vbaCopyBytes __vbaStrCat __vbaWriteFile ord660 __vbaLsetFixstr __vbaRecDestruct __vbaSetSystemError __vbaHresultCheckObj __vbaLenVar _adj_fdiv_m32 ord666 __vbaAryVar ord667 __vbaAryDestruct __vbaVarIndexLoadRefLock __vbaVarPow __vbaExitProc ord593 __vbaVarForInit __vbaStrLike __vbaObjSet ord595 __vbaOnError _adj_fdiv_m16i ord597 __vbaObjSetAddref _adj_fdivr_m16i __vbaVarIndexLoad ord598 ord599 __vbaCyStr ord520 __vbaStrFixstr __vbaBoolVar __vbaVarTstLt __vbaRefVarAry __vbaBoolVarNull __vbaFpR8 __vbaEraseKeepData _CIsin ord631 __vbaErase __vbaVargVarMove ord525 ord632 __vbaChkstk ord526 __vbaFileClose EVENT_SINK_AddRef ord527 ord528 __vbaGenerateBoundsError ord529 __vbaGet3 __vbaStrCmp __vbaVarTstEq __vbaPutOwner3 __vbaAryConstruct2 __vbaVarLikeVar __vbaObjVar __vbaPrintObj __vbaI2I4 DllFunctionCall __vbaCastObjVar __vbaStrR4 __vbaLbound __vbaRedimPreserve _adj_fpatan __vbaR4Var __vbaLateIdCallLd __vbaStrR8 __vbaRedim __vbaUI1ErrVar __vbaRecUniToAnsi EVENT_SINK_Release __vbaNew __vbaUI1I2 _CIsqrt __vbaVarAnd EVENT_SINK_QueryInterface __vbaVarMul __vbaExceptHandler ord711 __vbaInputFile __vbaStrToUnicode ord712 ord713 ord606 _adj_fprem _adj_fdivr_m64 __vbaVarDiv ord607 ord608 ord716 __vbaFPException __vbaInStrVar ord717 __vbaStrVarVal __vbaUbound __vbaGetOwner3 __vbaVarCat ord535 __vbaLsetFixstrFree __vbaI2Var ord536 ord537 ord644 ord645 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaInStr ord570 __vbaR8Str __vbaVar2Vec ord648 __vbaNew2 __vbaVarInt ord571 _adj_fdiv_m32i _adj_fdivr_m32i ord573 __vbaVarSetObj __vbaStrCopy __vbaI4Str __vbaVarNot __vbaFreeStrList ord576 _adj_fdivr_m32 _adj_fdiv_r ord685 ord100 __vbaVarTstNe __vbaVarSetVar __vbaI4Var __vbaVarCmpEq __vbaVarAdd __vbaLateMemCall __vbaAryLock __vbaStrToAnsi __vbaVarDup __vbaFpI2 __vbaFpI4 ord616 __vbaVarCopy __vbaRecDestructAnsi __vbaLateMemCallLd ord617 _CIatan ord618 __vbaAryCopy __vbaStrMove __vbaCastObj __vbaR8IntI4 __vbaPutFxStr3 __vbaI4Cy __vbaStrVarCopy ord619 _allmul __vbaLateIdSt _CItan ord546 __vbaFPInt __vbaAryUnlock __vbaVarForNext _CIexp __vbaStrCy __vbaRecAssign __vbaFreeObj __vbaFreeStr ord581

Sharing

General

Malware Config

Signatures

File Explorer

6ab6671c9fbba06f36bf4f655d03f498_JaffaCakes118

msvbvm60

generic