74d80f8cf63cfec510c95ca95266a535_JaffaCakes118

General

Target
74d80f8cf63cfec510c95ca95266a535_JaffaCakes118
Size 56KB
Sample240726-t22cmazbpp
SHA256 02547ad06486759460309b15cbf594556024a5e448adf9e42ec9fa668feb7691
MD5 74d80f8cf63cfec510c95ca95266a535
SHA1 fe9b8ef09efe5c3f0b12650bf5b23dd89ad15896
SHA512 ff957073d9c8e8d2cfc440f337a6d5af551fae67132ff76600d9ea0ce8c97337a1124f924f7c8b264b50a0e56ad923d8440effb03b80c3f334664eee78b9dff6
SSDEEP 768:KkXvXEbUkEh57GEZEZJqbsf9W1+EqAv3ES6c/E1cIcJ/XbX:KkXvXEOh57nQqb4aX3v6c/EeJ/XbX
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
74d80f8cf63cfec510c95ca95266a535_JaffaCakes118

File Explorer

74d80f8cf63cfec510c95ca95266a535_JaffaCakes118

.exe 56KB

74d80f8cf63cfec510c95ca95266a535_JaffaCakes118

IMPHASH 9c0f4019a4aa916b4f4471e700bea3b4
SHA256 02547ad06486759460309b15cbf594556024a5e448adf9e42ec9fa668feb7691
MD5 74d80f8cf63cfec510c95ca95266a535
SHA1 fe9b8ef09efe5c3f0b12650bf5b23dd89ad15896
SHA512 ff957073d9c8e8d2cfc440f337a6d5af551fae67132ff76600d9ea0ce8c97337a1124f924f7c8b264b50a0e56ad923d8440effb03b80c3f334664eee78b9dff6
SSDEEP 768:KkXvXEbUkEh57GEZEZJqbsf9W1+EqAv3ES6c/E1cIcJ/XbX:KkXvXEOh57nQqb4aX3v6c/EeJ/XbX
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6052

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarTstGt __vbaVarSub _CIcos _adj_fptan __vbaVarMove __vbaStrI4 __vbaVarVargNofree __vbaFreeVar __vbaLenBstr __vbaLateIdCall __vbaStrVarMove __vbaFreeVarList __vbaEnd _adj_fdiv_m64 __vbaNextEachVar _adj_fprem1 ord518 __vbaStrCat __vbaLsetFixstr __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryDestruct __vbaVarForInit __vbaObjSet __vbaOnError ord596 _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord598 __vbaFpR4 __vbaBoolVarNull _CIsin ord631 __vbaVarZero ord632 __vbaChkstk EVENT_SINK_AddRef __vbaGenerateBoundsError ord528 __vbaStrCmp __vbaVarTstEq __vbaAryConstruct2 __vbaI2I4 __vbaObjVar DllFunctionCall __vbaVarOr __vbaVarLateMemSt __vbaCastObjVar _adj_fpatan __vbaFixstrConstruct __vbaLateIdCallLd EVENT_SINK_Release ord600 _CIsqrt EVENT_SINK_QueryInterface __vbaExceptHandler __vbaStrToUnicode ord712 ord606 _adj_fprem _adj_fdivr_m64 ord607 ord608 __vbaFPException __vbaInStrVar __vbaStrVarVal __vbaVarCat ord535 __vbaI2Var ord537 __vbaExitEachVar _CIlog __vbaErrorOverflow __vbaNew2 __vbaVarLateMemCallLdRf __vbaInStr _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord100 __vbaVarSetVar __vbaI4Var __vbaVarCmpEq __vbaLateMemCall __vbaVarDup __vbaStrToAnsi __vbaVarLateMemCallLd __vbaVarCopy ord617 _CIatan __vbaStrMove __vbaCastObj __vbaForEachVar __vbaStrVarCopy _allmul __vbaLateIdSt _CItan __vbaAryUnlock __vbaVarForNext _CIexp __vbaFreeObj __vbaFreeStr

Sharing

General

Malware Config

Signatures

File Explorer

74d80f8cf63cfec510c95ca95266a535_JaffaCakes118

msvbvm60

generic