77fae4b264c13ae70072bc99dedf3027_JaffaCakes118

General

Target
77fae4b264c13ae70072bc99dedf3027_JaffaCakes118
Size 332KB
Sample240727-m74xdawerm
SHA256 870b98cb1045e9c098e16f3d957fb5d6ad322cdf21fdd0754a5a9f5e6e4d457d
MD5 77fae4b264c13ae70072bc99dedf3027
SHA1 67e0a345c82635b516acff20f918c77ae0020ac2
SHA512 99c7bc30d350f35cf79cc49a99e356d9dd2552f2199d5c92ad093313f64ce8b00ee30f4c7f5ff24a35735ae02ddbb6b9f829caa74c9a937d88a1b18f60e73098
SSDEEP 6144:KXjuCLCCmY3+dEbJiwvZI6E5InarO/YjTK0S+YTUVQks/DX5R:1C+C7MjwvZ+/BtHCX5R
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
77fae4b264c13ae70072bc99dedf3027_JaffaCakes118

File Explorer

77fae4b264c13ae70072bc99dedf3027_JaffaCakes118

.exe 332KB

77fae4b264c13ae70072bc99dedf3027_JaffaCakes118

IMPHASH 674182f28f242ff083deac3f08530940
SHA256 870b98cb1045e9c098e16f3d957fb5d6ad322cdf21fdd0754a5a9f5e6e4d457d
MD5 77fae4b264c13ae70072bc99dedf3027
SHA1 67e0a345c82635b516acff20f918c77ae0020ac2
SHA512 99c7bc30d350f35cf79cc49a99e356d9dd2552f2199d5c92ad093313f64ce8b00ee30f4c7f5ff24a35735ae02ddbb6b9f829caa74c9a937d88a1b18f60e73098
SSDEEP 6144:KXjuCLCCmY3+dEbJiwvZI6E5InarO/YjTK0S+YTUVQks/DX5R:1C+C7MjwvZ+/BtHCX5R
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5156

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA

msvbvm60.dll

_CIcos _adj_fptan __vbaStrI4 __vbaVarMove __vbaAryMove __vbaFreeVar __vbaLenBstr __vbaStrVarMove __vbaFreeVarList _adj_fdiv_m64 ord516 _adj_fprem1 __vbaLsetFixstr __vbaSetSystemError __vbaVargVarCopy _adj_fdiv_m32 __vbaAryVar __vbaAryDestruct __vbaOnError _adj_fdiv_m16i _adj_fdivr_m16i _CIsin ord631 __vbaErase __vbaVarZero __vbaChkstk __vbaFileClose EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaGet3 __vbaAryConstruct2 __vbaI2I4 DllFunctionCall ord563 __vbaLbound __vbaRedimPreserve _adj_fpatan __vbaFixstrConstruct __vbaRedim EVENT_SINK_Release __vbaUI1I2 _CIsqrt EVENT_SINK_QueryInterface __vbaUI1I4 __vbaExceptHandler ord711 __vbaStrToUnicode ord712 ord606 _adj_fprem _adj_fdivr_m64 ord608 __vbaFPException ord717 __vbaUbound __vbaVarCat ord644 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaVar2Vec _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaI4Str __vbaFreeStrList __vbaDerefAry1 _adj_fdivr_m32 _adj_fdiv_r ord578 ord100 __vbaAryLock __vbaVarDup __vbaStrToAnsi __vbaAryVarVarg __vbaVarCopy _CIatan __vbaStrMove __vbaAryCopy _allmul _CItan __vbaAryUnlock _CIexp __vbaI4ErrVar __vbaFreeStr

Sharing

General

Malware Config

Signatures

File Explorer

77fae4b264c13ae70072bc99dedf3027_JaffaCakes118

kernel32

msvbvm60.dll

generic