817d8289e96eae74c8dbe070e901308c_JaffaCakes118

General

Target
817d8289e96eae74c8dbe070e901308c_JaffaCakes118
Size 408KB
Sample240801-wp4nbswgrg
SHA256 66a415f832eb4cbce94e48311053ac2ec9ffd87eb6f9205ebc94f6d2e97e884e
MD5 817d8289e96eae74c8dbe070e901308c
SHA1 c1c9d4abf913b3b9be99c26ae2a130a49b808df8
SHA512 f74d8177df9070f35fc2fc52a85168300b689bfbace3c816637ffeda73bdee10116da093b415fc1cca40d97cfb94ca1852a0789c21140e0e3bc09d7a7910c60e
SSDEEP 6144:YZDhw/Nz+86gQ/FGz8C0mDwwQYuzz3J7asoU:YZ9w/NKzXwQYuzz3JDl
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
817d8289e96eae74c8dbe070e901308c_JaffaCakes118

File Explorer

817d8289e96eae74c8dbe070e901308c_JaffaCakes118

.exe 408KB

817d8289e96eae74c8dbe070e901308c_JaffaCakes118

IMPHASH 1e6b456eed015cc8476b38993407e4c5
SHA256 66a415f832eb4cbce94e48311053ac2ec9ffd87eb6f9205ebc94f6d2e97e884e
MD5 817d8289e96eae74c8dbe070e901308c
SHA1 c1c9d4abf913b3b9be99c26ae2a130a49b808df8
SHA512 f74d8177df9070f35fc2fc52a85168300b689bfbace3c816637ffeda73bdee10116da093b415fc1cca40d97cfb94ca1852a0789c21140e0e3bc09d7a7910c60e
SSDEEP 6144:YZDhw/Nz+86gQ/FGz8C0mDwwQYuzz3J7asoU:YZ9w/NKzXwQYuzz3JDl
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

11248

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

oleaut32

SysReAllocString

kernel32

VirtualAlloc RtlMoveMemory WideCharToMultiByte

msvbvm60

__vbaVarSub __vbaVarTstGt __vbaStrI2 _CIcos _adj_fptan __vbaStrI4 __vbaVarMove __vbaVarVargNofree __vbaFreeVar __vbaAryMove __vbaLateIdCall __vbaLenBstr __vbaStrVarMove __vbaFreeVarList _adj_fdiv_m64 __vbaFpCDblR8 __vbaRaiseEvent __vbaFreeObjList ord516 ord517 __vbaStrErrVarCopy _adj_fprem1 __vbaRecAnsiToUni ord519 __vbaStrCat __vbaForEachCollAd __vbaLsetFixstr ord660 ord553 ord661 __vbaSetSystemError __vbaHresultCheckObj __vbaLenVar ord665 _adj_fdiv_m32 __vbaVarCmpGe __vbaAryDestruct __vbaLateMemSt __vbaExitProc ord300 __vbaI4Abs __vbaObjSet __vbaOnError _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord598 ord305 __vbaFpR4 ord599 ord306 __vbaStrFixstr __vbaForEachCollVar __vbaBoolVar __vbaBoolVarNull __vbaFpR8 __vbaVarTstLt __vbaRefVarAry _CIsin ord631 __vbaErase __vbaVarCmpGt ord632 __vbaChkstk EVENT_SINK_AddRef ord527 __vbaGenerateBoundsError __vbaStrCmp __vbaAryConstruct2 __vbaPrintObj __vbaI2I4 ord561 __vbaObjVar __vbaNextEachCollVar DllFunctionCall __vbaVarOr __vbaCastObjVar _adj_fpatan __vbaR4Var __vbaFixstrConstruct __vbaLateIdCallLd __vbaRedim __vbaStrR8 __vbaRecUniToAnsi EVENT_SINK_Release __vbaNew __vbaUI1I2 _CIsqrt __vbaVarAnd __vbaObjIs ord311 EVENT_SINK_QueryInterface __vbaExceptHandler ord313 __vbaStrToUnicode ord712 ord606 _adj_fprem _adj_fdivr_m64 __vbaFailedFriend ord608 __vbaVarCmpLe __vbaFPException __vbaInStrVar __vbaUbound __vbaStrVarVal ord534 __vbaVarCat __vbaCheckType __vbaI2Var __vbaLsetFixstrFree ord537 _CIlog __vbaErrorOverflow __vbaInStr __vbaNew2 __vbaVar2Vec __vbaR8Str _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaI4Str ord681 __vbaVarCmpLt __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord685 ord100 __vbaVarTstNe __vbaI4Var __vbaVarCmpEq ord610 __vbaVarAdd __vbaAryLock __vbaStrToAnsi __vbaVarDup __vbaFpI2 __vbaVarCopy __vbaFpI4 ord616 ord617 __vbaLateMemCallLd _CIatan __vbaStrMove ord618 __vbaCastObj __vbaStrVarCopy ord650 _allmul __vbaLateIdSt __vbaLenVarB _CItan __vbaNextEachCollAd __vbaFPInt __vbaAryUnlock _CIexp __vbaMidStmtBstr __vbaFreeObj __vbaFreeStr ord581

Sharing

General

Malware Config

Signatures

File Explorer

817d8289e96eae74c8dbe070e901308c_JaffaCakes118

oleaut32

kernel32

msvbvm60

generic