4020999b22f5beaa0217799963950645_JaffaCakes118

General

Target
4020999b22f5beaa0217799963950645_JaffaCakes118
Size 408KB
Sample240729-maxrssxdkg
SHA256 bfd9883657f5a682589c21b9a675b182220ac11bb290c0c45be48f802b26dcc4
MD5 4020999b22f5beaa0217799963950645
SHA1 29a5d701fcb93abcb534de4bf1084217f3ea9a3b
SHA512 407bb4bd748d534eb5e5fe3829c68c509cb307dd12df0d69f9564f8b96bf6ad2e633fbea8cb1304ef648112d3ba836e9d8963d07ebd07adc15e4ad6e6766a3fd
SSDEEP 6144:YZDhw/N4+86gQ/FGz8C0mDwwQYuzz3J7asoU:YZ9w/NTzXwQYuzz3JDl
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4020999b22f5beaa0217799963950645_JaffaCakes118

File Explorer

4020999b22f5beaa0217799963950645_JaffaCakes118

.exe 408KB

4020999b22f5beaa0217799963950645_JaffaCakes118

IMPHASH 1e6b456eed015cc8476b38993407e4c5
SHA256 bfd9883657f5a682589c21b9a675b182220ac11bb290c0c45be48f802b26dcc4
MD5 4020999b22f5beaa0217799963950645
SHA1 29a5d701fcb93abcb534de4bf1084217f3ea9a3b
SHA512 407bb4bd748d534eb5e5fe3829c68c509cb307dd12df0d69f9564f8b96bf6ad2e633fbea8cb1304ef648112d3ba836e9d8963d07ebd07adc15e4ad6e6766a3fd
SSDEEP 6144:YZDhw/N4+86gQ/FGz8C0mDwwQYuzz3J7asoU:YZ9w/NTzXwQYuzz3JDl
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

11248

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

oleaut32

SysReAllocString

kernel32

VirtualAlloc RtlMoveMemory WideCharToMultiByte

msvbvm60

__vbaVarSub __vbaVarTstGt __vbaStrI2 _CIcos _adj_fptan __vbaStrI4 __vbaVarMove __vbaVarVargNofree __vbaFreeVar __vbaAryMove __vbaLateIdCall __vbaLenBstr __vbaStrVarMove __vbaFreeVarList _adj_fdiv_m64 __vbaFpCDblR8 __vbaRaiseEvent __vbaFreeObjList ord516 ord517 __vbaStrErrVarCopy _adj_fprem1 __vbaRecAnsiToUni ord519 __vbaStrCat __vbaForEachCollAd __vbaLsetFixstr ord660 ord553 ord661 __vbaSetSystemError __vbaHresultCheckObj __vbaLenVar ord665 _adj_fdiv_m32 __vbaVarCmpGe __vbaAryDestruct __vbaLateMemSt __vbaExitProc ord300 __vbaI4Abs __vbaObjSet __vbaOnError _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord598 ord305 __vbaFpR4 ord599 ord306 __vbaStrFixstr __vbaForEachCollVar __vbaBoolVar __vbaBoolVarNull __vbaFpR8 __vbaVarTstLt __vbaRefVarAry _CIsin ord631 __vbaErase __vbaVarCmpGt ord632 __vbaChkstk EVENT_SINK_AddRef ord527 __vbaGenerateBoundsError __vbaStrCmp __vbaAryConstruct2 __vbaPrintObj __vbaI2I4 ord561 __vbaObjVar __vbaNextEachCollVar DllFunctionCall __vbaVarOr __vbaCastObjVar _adj_fpatan __vbaR4Var __vbaFixstrConstruct __vbaLateIdCallLd __vbaRedim __vbaStrR8 __vbaRecUniToAnsi EVENT_SINK_Release __vbaNew __vbaUI1I2 _CIsqrt __vbaVarAnd __vbaObjIs ord311 EVENT_SINK_QueryInterface __vbaExceptHandler ord313 __vbaStrToUnicode ord712 ord606 _adj_fprem _adj_fdivr_m64 __vbaFailedFriend ord608 __vbaVarCmpLe __vbaFPException __vbaInStrVar __vbaUbound __vbaStrVarVal ord534 __vbaVarCat __vbaCheckType __vbaI2Var __vbaLsetFixstrFree ord537 _CIlog __vbaErrorOverflow __vbaInStr __vbaNew2 __vbaVar2Vec __vbaR8Str _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaI4Str ord681 __vbaVarCmpLt __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord685 ord100 __vbaVarTstNe __vbaI4Var __vbaVarCmpEq ord610 __vbaVarAdd __vbaAryLock __vbaStrToAnsi __vbaVarDup __vbaFpI2 __vbaVarCopy __vbaFpI4 ord616 ord617 __vbaLateMemCallLd _CIatan __vbaStrMove ord618 __vbaCastObj __vbaStrVarCopy ord650 _allmul __vbaLateIdSt __vbaLenVarB _CItan __vbaNextEachCollAd __vbaFPInt __vbaAryUnlock _CIexp __vbaMidStmtBstr __vbaFreeObj __vbaFreeStr ord581

Sharing

General

Malware Config

Signatures

File Explorer

4020999b22f5beaa0217799963950645_JaffaCakes118

oleaut32

kernel32

msvbvm60

generic