83ddc08e4b8330a45033eeb18ec395a4_JaffaCakes118

General

Target
83ddc08e4b8330a45033eeb18ec395a4_JaffaCakes118
Size 448KB
Sample240809-2s1zhaxdrf
SHA256 be3b7fcad24c3c19646d52bf305732dc44d30ec4bbeaa1328fcf7a68a6cb3cbf
MD5 83ddc08e4b8330a45033eeb18ec395a4
SHA1 06f593410f596f40e184b3bf1041708e9007cd21
SHA512 0518273fd4ce0cce2aaa8dda017675e717b0908aa6519ea1fe85145d805032ec71bb96a412cba7319081bbb559f97fb6ab6837d14f405ef289365ff2d83b25cf
SSDEEP 6144:v2IKUJhRjoikckH+4ospucrZoQNPcvjDBTRFB1AewwESs5q8CTcA1LiC1kStX:F7oilkHXpj7P0DBTR/udMsI8C114S
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
83ddc08e4b8330a45033eeb18ec395a4_JaffaCakes118

File Explorer

83ddc08e4b8330a45033eeb18ec395a4_JaffaCakes118

.exe 448KB

83ddc08e4b8330a45033eeb18ec395a4_JaffaCakes118

IMPHASH 8bbe56be552e64d1269338e4dd3da9ff
SHA256 be3b7fcad24c3c19646d52bf305732dc44d30ec4bbeaa1328fcf7a68a6cb3cbf
MD5 83ddc08e4b8330a45033eeb18ec395a4
SHA1 06f593410f596f40e184b3bf1041708e9007cd21
SHA512 0518273fd4ce0cce2aaa8dda017675e717b0908aa6519ea1fe85145d805032ec71bb96a412cba7319081bbb559f97fb6ab6837d14f405ef289365ff2d83b25cf
SSDEEP 6144:v2IKUJhRjoikckH+4ospucrZoQNPcvjDBTRFB1AewwESs5q8CTcA1LiC1kStX:F7oilkHXpj7P0DBTR/udMsI8C114S
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

24814

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

msvbvm60

_CIcos _adj_fptan __vbaStrI4 __vbaVarMove __vbaVarVargNofree __vbaFreeVar __vbaAryMove __vbaLenBstr __vbaStrVarMove __vbaGosubReturn __vbaFreeVarList _adj_fdiv_m64 ord516 _adj_fprem1 __vbaRecAnsiToUni __vbaStrCat __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryDestruct _adj_fdiv_m16i _adj_fdivr_m16i _CIsin ord631 __vbaErase ord632 __vbaVarZero __vbaChkstk __vbaGosubFree __vbaGenerateBoundsError __vbaStrCmp __vbaAryConstruct2 __vbaI2I4 DllFunctionCall __vbaRedimPreserve _adj_fpatan __vbaRedim __vbaRecUniToAnsi __vbaUI1I2 _CIsqrt __vbaUI1I4 __vbaExceptHandler __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 __vbaGosub ord607 __vbaFPException ord717 __vbaUbound __vbaStrVarVal __vbaVarCat ord644 _CIlog __vbaErrorOverflow __vbaNew2 __vbaVar2Vec _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy ord573 __vbaFreeStrList __vbaDerefAry1 _adj_fdivr_m32 _adj_fdiv_r ord100 __vbaAryLock __vbaStrToAnsi __vbaVarDup __vbaFpI4 ord616 _CIatan __vbaStrMove ord618 __vbaUI1Str __vbaStrVarCopy _allmul _CItan __vbaAryUnlock _CIexp __vbaI4ErrVar __vbaFreeStr __vbaFreeObj

Sharing

General

Malware Config

Signatures

File Explorer

83ddc08e4b8330a45033eeb18ec395a4_JaffaCakes118

msvbvm60

generic