75fe1455c246a43ff67b000d24b08d5f_JaffaCakes118

General

Target
75fe1455c246a43ff67b000d24b08d5f_JaffaCakes118
Size 345KB
Sample240726-2edxtayeqr
SHA256 148d9ba70b566be8c9c9809e3516966f58aa4f9edc6c8b6a623684a870c9ba0a
MD5 75fe1455c246a43ff67b000d24b08d5f
SHA1 d455eec9d0140d98dceb4ab438f7c1ced8005414
SHA512 23ed93cbbee84ea3286cf9c31209b69d5d6e9b7943f74eebd6adcd914d1a1d77ebe5beb734f729fc33f335a23482440875c49d57bbac4762ee97d039c27a2ce1
SSDEEP 6144:Md5c+Twk9Zl3wd6F+0bYHmiaFYqkwi6PLYYZPsQQTg+puS:M9h9Zh86A0UHmiaPkwiX2EgS
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
75fe1455c246a43ff67b000d24b08d5f_JaffaCakes118

File Explorer

75fe1455c246a43ff67b000d24b08d5f_JaffaCakes118

.exe 345KB

75fe1455c246a43ff67b000d24b08d5f_JaffaCakes118

IMPHASH b8763cc61c1f55c1a772141d09accd1f
SHA256 148d9ba70b566be8c9c9809e3516966f58aa4f9edc6c8b6a623684a870c9ba0a
MD5 75fe1455c246a43ff67b000d24b08d5f
SHA1 d455eec9d0140d98dceb4ab438f7c1ced8005414
SHA512 23ed93cbbee84ea3286cf9c31209b69d5d6e9b7943f74eebd6adcd914d1a1d77ebe5beb734f729fc33f335a23482440875c49d57bbac4762ee97d039c27a2ce1
SSDEEP 6144:Md5c+Twk9Zl3wd6F+0bYHmiaFYqkwi6PLYYZPsQQTg+puS:M9h9Zh86A0UHmiaPkwiX2EgS
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6048

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

_CIcos _adj_fptan __vbaVarMove __vbaVarVargNofree __vbaFreeVar __vbaAryMove __vbaLineInputStr __vbaLateIdCall __vbaStrVarMove __vbaLenBstr __vbaEnd __vbaFreeVarList _adj_fdiv_m64 __vbaNextEachVar __vbaFreeObjList _adj_fprem1 __vbaLsetFixstr __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryDestruct ord593 __vbaVarForInit __vbaObjSet __vbaOnError _adj_fdiv_m16i ord303 __vbaObjSetAddref _adj_fdivr_m16i __vbaVarIndexLoad ord598 __vbaBoolVar ord309 _CIsin ord709 __vbaErase __vbaVarZero __vbaChkstk __vbaFileClose EVENT_SINK_AddRef __vbaGet3 __vbaStrCmp __vbaAryConstruct2 __vbaVarTstEq DllFunctionCall _adj_fpatan __vbaFixstrConstruct __vbaLateIdCallLd __vbaRedim __vbaUI1ErrVar EVENT_SINK_Release ord601 _CIsqrt EVENT_SINK_QueryInterface __vbaStr2Vec __vbaExceptHandler ord711 __vbaStrToUnicode ord712 ord606 _adj_fprem _adj_fdivr_m64 ord608 __vbaFPException ord717 __vbaStrVarVal __vbaUbound __vbaVarCat ord644 ord645 _CIlog __vbaFileOpen ord648 __vbaNew2 __vbaVar2Vec ord571 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord578 ord100 __vbaI4Var __vbaAryLock __vbaVarAdd __vbaVarDup __vbaStrToAnsi ord616 __vbaLateMemCallLd _CIatan __vbaStrMove __vbaR8IntI4 __vbaForEachVar _allmul __vbaLateIdSt _CItan __vbaAryUnlock __vbaVarForNext _CIexp __vbaFreeObj __vbaI4ErrVar __vbaFreeStr

Sharing

General

Malware Config

Signatures

File Explorer

75fe1455c246a43ff67b000d24b08d5f_JaffaCakes118

msvbvm60

generic